auditSystem

The auditSystem pass processes unattended Setup settings in system context in audit mode. The auditSystem pass runs immediately before the auditUser pass, which is used to apply settings in user context.

Typically, auditSystem is used to add additional device drivers and assign a name to the system specific for audit mode.

Audit mode enables OEMs and corporations to install additional device drivers, applications, and other updates. When Windows boots to audit mode, the auditSystem and auditUser unattended Windows Setup settings are processed.

By using audit mode, you can maintain fewer Windows images, because you can create a reference image with a minimal set of drivers. The image can be updated with additional drivers during audit mode. You can then test and resolve any issues related to malfunctioning or incorrectly installed devices on the Windows image.

The following diagram shows the processes of audit mode.

AuditSystem runs only when you configure Windows Setup to boot into audit mode. You can boot to audit mode by using sysprep /audit, or sysprep /generalize /audit, or you can specify the Reseal setting in the Microsoft-Windows-Deployment component. For more information, see the Unattended Windows Setup Reference.

Audit mode is optional.

See Also

Concepts

auditUser
generalize
offlineServicing
oobeSystem
specialize
windowsPE