You must use and activate the administrator account during audit passes (user and system)
In auditSystem, the built-in administrator account is enabled by the system, and after logging into the system,
the built-in administrator account is disabled during auditUser. This enables you to use audit mode with administrator privileges,
but the next time the computer shuts down, the built-in administrator account will continue to be disabled.
For more information, see Enable and Disable the Built-in Administrator Account.
Here my unattend file.
the system boots in audit mode, when i resceal it by usinf
sysprep /oobe, the administrator account is removed, and the end user enters OOBE.
<?xml version="1.0" encoding="utf-8"?>
<unattend xmlns="urn:schemas-microsoft-com:unattend">
<settings pass="windowsPE">
<component name="Microsoft-Windows-Setup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<DiskConfiguration>
<WillShowUI>Always</WillShowUI>
</DiskConfiguration>
<UserData>
<ProductKey>
<Key>YFKBB-PQJJV-G996G-VWGXY-2V3X8</Key>
<WillShowUI>OnError</WillShowUI>
</ProductKey>
<AcceptEula>true</AcceptEula>
<FullName></FullName>
<Organization></Organization>
</UserData>
<ImageInstall>
<OSImage>
<WillShowUI>OnError</WillShowUI>
</OSImage>
</ImageInstall>
<Display>
<ColorDepth>32</ColorDepth>
<RefreshRate>60</RefreshRate>
<HorizontalResolution>1024</HorizontalResolution>
<VerticalResolution>768</VerticalResolution>
</Display>
<UseConfigurationSet>true</UseConfigurationSet>
<EnableFirewall>false</EnableFirewall>
<EnableNetwork>true</EnableNetwork>
</component>
<component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<SetupUILanguage>
<UILanguage>fr-fr</UILanguage>
</SetupUILanguage>
<InputLocale>1036:0x0000040c</InputLocale>
<SystemLocale>fr-fr</SystemLocale>
<UILanguage>fr-fr</UILanguage>
<UserLocale>fr-fr</UserLocale>
</component>
<component name="Microsoft-Windows-PnpCustomizationsWinPE" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<DriverPaths>
<PathAndCredentials wcm:keyValue="FastTrak_376-378_RAID" wcm:action="add">
<Path>%configsetroot%\Drivers\Storage\FastTrak_376-378_RAID</Path>
</PathAndCredentials>
<PathAndCredentials wcm:keyValue="Promise_SATA378_IDE" wcm:action="add">
<Path>%configsetroot%\Drivers\Storage\Promise_SATA378_IDE</Path>
</PathAndCredentials>
</DriverPaths>
</component>
</settings>
<settings pass="specialize">
<component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<BlockPopups>yes</BlockPopups>
<Home_Page>http://www.xxxx.com</Home_Page>
<IEWelcomeMsg>true</IEWelcomeMsg>
<PlaySound>true</PlaySound>
<ShowInformationBar>true</ShowInformationBar>
<CompanyName>xxxx.Com</CompanyName>
<Help_Page>http://www.xxxx.com/alias/contacts.html</Help_Page>
<FavoritesList>
<FavoriteItem wcm:action="add">
<FavTitle>gfdgsdfgsdgs</FavTitle>
<FavURL>http://www.xxxx.com</FavURL>
<FavID>1</FavID>
</FavoriteItem>
</FavoritesList>
<FeedList>
<FeedItem wcm:action="add">
<FeedKey>1</FeedKey>
<FeedURL>http://www.xxxx.com</FeedURL>
<FeedTitle>fgfsdgdsfgsd</FeedTitle>
</FeedItem>
</FeedList>
<SearchScopes>
<Scope wcm:action="add">
<ScopeDefault>true</ScopeDefault>
<ScopeKey>1</ScopeKey>
<ScopeDisplayName>Google.fr</ScopeDisplayName>
<ScopeUrl>http://www.google.fr/search?hl=fr&q={searchTerms}+&meta=</ScopeUrl>
</Scope>
</SearchScopes>
<Window_Title_CN>xxxx.Com</Window_Title_CN>
</component>
<component name="Microsoft-Windows-Shell-Setup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<AutoLogon>
<Password>
<Value>bABkAGwAYwBQAGEAcwBzAHcAbwByAGQA</Value>
<PlainText>false</PlainText>
</Password>
<LogonCount>5</LogonCount>
<Username>Administrator</Username>
<Enabled>true</Enabled>
</AutoLogon>
<OEMInformation>
<Logo>c:\windows\system32\oobe\xxxx\oemlogo.bmp</Logo>
<Manufacturer>xxxx.Com</Manufacturer>
<SupportHours>10h-18h du lundi au vendredi - 10h-16h30 le samedi</SupportHours>
<SupportPhone>416546849</SupportPhone>
<SupportURL>http://www.xxxx.com/alias/contacts.html</SupportURL>
</OEMInformation>
<RegisteredOrganization />
<RegisteredOwner />
<ShowWindowsLive>false</ShowWindowsLive>
<TimeZone>Romance Standard Time</TimeZone>
<StartPanelLinks>
<Link0>%USERPROFILE%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk</Link0>
<Link1>%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\maintenance\Backup and Restore Center.lnk</Link1>
<Link2>%USERPROFILE%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Command Prompt.lnk</Link2>
<Link3></Link3>
</StartPanelLinks>
</component>
<component name="Microsoft-Windows-International-Core" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<InputLocale>1036:0x0000040c</InputLocale>
<UILanguage>fr-fr</UILanguage>
<UILanguageFallback></UILanguageFallback>
<UserLocale>fr-fr</UserLocale>
<SystemLocale>fr-fr</SystemLocale>
</component>
<component name="Microsoft-Windows-Deployment" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<RunSynchronous>
<RunSynchronousCommand wcm:action="add">
<Path>%systemroot%\System32\reg import %systemroot%\System32\OOBE\xxxx\registre.reg</Path>
<Order>1</Order>
<Description>Reg Tweaks</Description>
</RunSynchronousCommand>
<RunSynchronousCommand wcm:action="add">
<Order>2</Order>
<Path>%systemroot%\System32\cmd /c "rd /S /Q %systemroot%\ConfigSetRoot"</Path>
<Description>Suppression Configsetroot</Description>
</RunSynchronousCommand>
</RunSynchronous>
</component>
</settings>
<settings pass="auditSystem">
<component name="Microsoft-Windows-Deployment" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<Reseal>
<Mode>Audit</Mode>
<ForceShutdownNow>true</ForceShutdownNow>
</Reseal>
<AuditComputerName>
<MustReboot>true</MustReboot>
<Name>Audit</Name>
</AuditComputerName>
</component>
<component name="Microsoft-Windows-Shell-Setup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<AutoLogon>
<Password>
<Value>bABkAGwAYwBQAGEAcwBzAHcAbwByAGQA</Value>
<PlainText>false</PlainText>
</Password>
<Username>Administrator</Username>
<Enabled>true</Enabled>
<LogonCount>5</LogonCount>
</AutoLogon>
<UserAccounts>
<AdministratorPassword>
<Value>bABkAGwAYwBBAGQAbQBpAG4AaQBzAHQAcgBhAHQAbwByAFAAYQBzAHMAdwBvAHIAZAA=</Value>
<PlainText>false</PlainText>
</AdministratorPassword>
</UserAccounts>
<Display>
<ColorDepth>32</ColorDepth>
<DPI>96</DPI>
<HorizontalResolution>1280</HorizontalResolution>
<RefreshRate>60</RefreshRate>
<VerticalResolution>1024</VerticalResolution>
</Display>
<ShowWindowsLive>false</ShowWindowsLive>
</component>
</settings>
<settings pass="oobeSystem">
<component name="Microsoft-Windows-Shell-Setup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<OOBE>
<HideEULAPage>true</HideEULAPage>
<NetworkLocation>Work</NetworkLocation>
<ProtectYourPC>1</ProtectYourPC>
<SkipUserOOBE>true</SkipUserOOBE>
</OOBE>
<RegisteredOwner />
<TimeZone>Romance Standard Time</TimeZone>
<RegisteredOrganization />
<UserAccounts>
<AdministratorPassword>
<Value>bABkAGwAYwBBAGQAbQBpAG4AaQBzAHQAcgBhAHQAbwByAFAAYQBzAHMAdwBvAHIAZAA=</Value>
<PlainText>false</PlainText>
</AdministratorPassword>
</UserAccounts>
<VisualEffects>
<FontSmoothing>ClearType</FontSmoothing>
</VisualEffects>
<ShowWindowsLive>false</ShowWindowsLive>
<StartPanelLinks>
<Link0>%USERPROFILE%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk</Link0>
<Link1>%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\maintenance\Backup and Restore Center.lnk</Link1>
<Link2>%USERPROFILE%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Command Prompt.lnk</Link2>
<Link3></Link3>
</StartPanelLinks>
</component>
<component name="Microsoft-Windows-International-Core" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<InputLocale>1036:0x0000040c</InputLocale>
<SystemLocale>fr-fr</SystemLocale>
<UILanguage>fr-fr</UILanguage>
<UserLocale>fr-fr</UserLocale>
</component>
<component name="Microsoft-Windows-Deployment" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<Reseal>
<Mode>Audit</Mode>
</Reseal>
</component>
<component name="Microsoft-Windows-PerfCenterCPL" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<WindowsExperienceIndexOemInfo>
<Logo>c:\windows\system32\oobe\xxxx\oemlogo.bmp</Logo>
<HardwareUpgradeURL>http://www.xxxx.com</HardwareUpgradeURL>
</WindowsExperienceIndexOemInfo>
</component>
<component name="Microsoft-Windows-Sidebar" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<Gadget2>false</Gadget2>
<Gadget1>false</Gadget1>
<Gadget3>false</Gadget3>
<Gadget4></Gadget4>
<Gadget5></Gadget5>
</component>
<component name="Microsoft-Windows-ehome-reg-inf" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<OEMName>xxxx.com</OEMName>
<OEMLogoUri>file://c:\windows\system32\oobe\xxxx\MCE.png</OEMLogoUri>
</component>
</settings>
</unattend>
The product key is present in the vista DVD (\sources\inf\setup.cfg) , it's a generic unactivable producte key that allows you the install any vista version.
This post has been edited by EmRoD: 31 January 2007 - 05:15 AM