Audit mode lets you customise a Windows 10 installation, installing drivers and apps, before the first user account is created, which is useful for IT staff and PC builders. On the first setup screen (the out-of-box experience), press Ctrl + Shift + F3. Windows restarts and signs in to the built-in Administrator account in audit mode, showing the System Preparation Tool window. When you’re finished, choose Enter System Out-of-Box Experience (OOBE) in that window, optionally tick Generalize, and restart or shut down. Windows 10 reached end of support on October 14, 2025. Consumer Extended Security Updates (ESU) now run until October 12, 2027.
Quick Answer
At the first setup screen press Ctrl + Shift + F3. To leave audit mode, choose Enter System OOBE in the System Preparation Tool and click OK.
Enter Audit Mode From Setup
- Install Windows or start a new PC so it shows the region or account setup screen.
- Press Ctrl + Shift + F3.
- The PC restarts into audit mode as the built-in Administrator. Leave the System Preparation Tool window open (you can minimise it).
- Install drivers, updates and apps, and change settings.
Enter Audit Mode From a Running System
From an administrator Command Prompt, run %WINDIR%\System32\Sysprep\sysprep.exe /audit /reboot. Use this only on a PC you’re preparing for deployment, not on a daily-use PC with personal accounts.
Leave Audit Mode
- In the System Preparation Tool, set System Cleanup Action to Enter System Out-of-Box Experience (OOBE).
- Tick Generalize if you’re making an image for other PCs (it removes PC-specific information).
- Choose Shutdown to capture an image, or Reboot to hand the PC to a user.
Audit Mode vs. OOBE
| Mode | Who uses it | What happens |
|---|---|---|
| Audit mode | IT staff, PC builders | Customise as Administrator before any user exists |
| OOBE | The end user | Region, account and privacy setup |
Troubleshooting
- Stuck in audit mode after restarts: Choose Enter System OOBE in the tool; audit mode repeats until you do.
- Sysprep error about apps: Store apps installed for one user can block generalize. Remove them or install them for all users.
- Building an image: See creating a custom Windows 10 image and running Sysprep on Windows 11.
Frequently Asked Questions
Is audit mode safe on my own PC?
It’s designed for setting up new installations. On a PC you already use, stick to normal settings.
Does it work in Windows 11?
Yes. The same shortcut and Sysprep options apply.
Do I need a password for the Administrator account?
In audit mode the built-in Administrator signs in automatically; it’s disabled again when OOBE runs.
Summary
- Press Ctrl + Shift + F3 at the first setup screen.
- Customise drivers, apps and settings.
- Choose Enter System OOBE (Generalize for images).
- Shut down or restart.
Kermit Matthews is a freelance writer based in Philadelphia, Pennsylvania with more than a decade of experience writing technology guides. He has a Bachelor’s and Master’s degree in Computer Science and has spent much of his professional career in IT management.
He specializes in writing content about iPhones, Android devices, Microsoft Office, and many other popular applications and devices.