Hi

If I shutdown a system in Audit mode it locks me out of that system. When it starts up again it says the "Administrator account is disabled" and it won't log in. I'm also unable to restart the system as I could on Windows 8.1 to resolve this.

I think this was something to do with "Fast Start" in the power settings.

I remember I had to turn that off to get audit mode working properly.

I think this was something to do with "Fast Start" in the power settings.

I remember I had to turn that off to get audit mode working properly.

Not really an option when we're using Audit mode on hundreds of systems each day.

Unless you know an automated method to Disable and Enable "Fast Start"?

• Edited by jason_chillyb 20 hours 54 minutes ago update

I think this was something to do with "Fast Start" in the power settings.

I remember I had to turn that off to get audit mode working properly.

Not really an option when we're using Audit mode on hundreds of systems each day.

Unless you know an automated method to Disable and Enable "Fast Start"?

• Edited by jason_chillyb Wednesday, July 29, 2015 10:58 AM update

I posted about this in the (locked) Preview forums. The problem is the Restart option is missing from the Logon Screen in audit mode. So if the computer goes to sleep, you can't get back in without removing power to the system. If the system is a tablet without a removable battery, you're doomed.

Hi Jason and Tripredacus,

I just got the Evaluation copy to test this with Virtual Machine.

And It seems to be not available for me to press Ctrl + Shift + F3, so I just take use of the sysprep Tool listed at

C:\Windows\System32\Sysprep,

Only choose enter system audit mode at the system cleanup action part and restart on the shutdown options part.

previously the built-in admin account is disabled.

After the system restart, I was automatically logged on using the Administrator account:

So, what the methods that you have been used to enter audit mode?

Regards

Ctrl + Shift + F3 does work but I actually deploy straight from a Windows Deployment Server into Audit mode using an autounattend file. It doesn't matter which method you use, same result.

Once in Audit mode please click "Shutdown" and then start the system up again (without removing power) and you will get the same experience as us.

So, what the methods that you have been used to enter audit mode?

If you are in audit mode and the computer goes to sleep either due to default power setting, closing notebook lid, accident, etc... on resume the computer will be locked. Lock screen does not have the restart button and the account is disabled so you can't log in.

I believe the default power setting for a mobile device (notebook) is set to put the computer to sleep after 15 or 30 minutes. This is part of the problem. The power button default option is to put the computer to sleep, so you can't hold power button either.

If it happens on a notebook, you must remove power and battery. Then plug in again and when you turn on it will not be resuming from hibernate. It may give you the "improper shutdown" message but when it comes back up it will log in normally.

If this happens on a mobile device where the battery is not removable, a person would have to wait until the battery fully dies in order to get the system to cold boot and be able to log back into Audit Mode or enter "BIOS" Setup.

• Edited by Tripredacus Thursday, July 30, 2015 8:13 PM

Well,

Finally I got you guys point. And I received the message when sign-in with the built-in admin account:

Your account has been disabled, please see your system administrator.

What I should mention is that, when I click OK I could come to the screen below:

There would be available to switch user, or click the power button to shutdown or restart.

Further, I should mention that after the second sysprep /generalize /Auditmode /restart, the start menu won't work, and when I try to wake up the settings through the desktop right click ->personalization, the following error popped out:

Regards

Well,

Finally I got you guys point. And I received the message when sign-in with the built-in admin account:

Your account has been disabled, please see your system administrator.

What I should mention is that, when I click OK I could come to the screen below:

There would be available to switch user, or click the power button to shutdown or restart.

Further, I should mention that after the second sysprep /generalize /Auditmode /restart, the start menu won't work, and when I try to wake up the settings through the desktop right click ->personalization, the following error popped out:

R

Well jason, Tripredacus and MariusK,

I will help to collect this at my side.

Thank you for your sharing and patience.

Regards

• Proposed as answer by Michael ShaoMicrosoft contingent staff, Moderator Saturday, August 08, 2015 12:57 AM
• Unproposed as answer by jason_chillyb Monday, August 10, 2015 7:42 AM

An update. After adding ZDP.5 (KB3074663) to my images, I have a Restart button on the lock screen in Audit Mode.

Hmmm, same problem here except pulling main power does not get me back in. Must be fast boot bios feature. I have to do the unthinkable and hit reset button. Hope this something MS can fix along with the generalize audit start menu bug.

P.S.  Posted this in partner forum, but they can't reproduce those problems.  It must be my environment they say ;-)

• Edited by kthane Friday, August 07, 2015 9:52 PM spell

Up to ZDP 15 now and still not seeing the Lock screen without the power/restart options like you describe.

In relation to the Start Menu not working, also the Bluetooth menus do not work either.

OK wait, I think there are two issues here.

1. In RTM release of Windows 10, there was no restart/power option on the Lock Screen as there was in Windows 7-8.1. This is required for Audit Mode because of the next point:

2. When you put the computer to sleep, while in Audit Mode, when you wake you can't log in.

EDIT: I'm seeing different behaviour using different models of notebook. On one, it works as I described, yes the shutdown puts the computer to sleep, but upon wake I get the restart option. On another, I get what kthane and others are reporting, where you don't get the option to get to the buttons, which do flash in the background.

I will do some real testing on this and get back with results if it hasn't been solved by then.

• Edited by Tripredacus 13 hours 12 minutes ago did testing.

Update: I have tested on 3 systems so far and found 3 different experiences.

However in all 3, this command is a workaround.

powercfg -h off

That command disabled hibernation. It does not solve the issue with the 2 locks screens overlapping each other!

I can provide full details of my testing if needed.