none
Sysprep Problem (Audit mode can't be turned on if there is an active scenario.) RRS feed

  • Question

  • Window version : Windows 10 1903 (18362.30)

    I run the "sysprep" program with administrator but it doesn't work. I check the log file which show the error : 

    2019-04-18 09:53:28, Error                 SYSPRP Sysprep_Clean_Validate_Opk: Audit mode can't be turned on if there is an active scenario.; hr = 0x800F0975
    2019-04-18 09:53:28, Error                 SYSPRP ActionPlatform::LaunchModule: Failure occurred while executing 'Sysprep_Clean_Validate_Opk' from C:\Windows\System32\spopk.dll; dwRet = 0x975
    2019-04-18 09:53:28, Error                 SYSPRP SysprepSession::Validate: Error in validating actions from C:\Windows\System32\Sysprep\ActionFiles\Cleanup.xml; dwRet = 0x975
    2019-04-18 09:53:28, Error                 SYSPRP RunPlatformActions:Failed while validating Sysprep session actions; dwRet = 0x975
    2019-04-18 09:53:28, Error      [0x0f0070] SYSPRP RunDlls:An error occurred while running registry sysprep DLLs, halting sysprep execution. dwRet = 0x975
    2019-04-18 09:53:28, Error      [0x0f00d8] SYSPRP WinMain:Hit failure while pre-validate sysprep cleanup internal providers; hr = 0x80070975
    2019-04-18 09:53:30, Info       [0x0f0052] SYSPRP Shutting down SysPrep log
    2019-04-18 09:53:30, Info       [0x0f004d] SYSPRP The time is now 2019-04-18 09:53:30

    I also run the Powershell to clean the package before run the sysprep

    "Get-AppxPackage -AllUsers | Remove-AppxPackage"

    Please help me !

    Thursday, April 18, 2019 2:05 AM

Answers

  • Thanks God !

    The problem has been solved. According the log file, "Sysprep_Clean_Validate_Opk" is from C:\Windows\System32\spopk.dll. I try to replace the "spopk.dll" from another Windows 10 (nor 1903). The sysprep is working.

    I compare the two versions "spopk.dll". The file size is not same. I think Microsoft had modified the file.

    • Marked as answer by AndrewhHo Friday, April 26, 2019 7:56 AM
    Friday, April 26, 2019 7:56 AM

All replies

  • Hi,

     

    Please understand that from our professional level, we do not provide log analysis. But from my personal point of view, I still hope to do my best to help you analyze. In addition, if this problem is more urgent for you I still recommend that you open a case to Microsoft for further professional help.

     

    Before we start fixing this issue, I’d like to confirm that what’s the Sysprep scenario, Creating a Build-to-Plan (BTP) Windows Image, Creating a Build-to-Order (BTO) Windows Image or Booting to Audit Mode?

     

    Meanwhile, please note Sysprep has the following limitations:

     

    1. You must use only the version of Sysprep that is installed with the Windows image that you intend to configure. Sysprep is installed with every version of Windows and must always be run from the %WINDIR%\system32\sysprep directory.

    2. Sysprep must not be used on upgrade installation types. Run Sysprep only on clean installations.

    3. If you plan to use the imagex /apply command to apply a Windows image to a computer, the partition layout on the reference and destination computers must be identical. 

     

    For more information, please read this official document: https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-vista/cc721940(v=ws.10)

     

    In addition, here is a similar link just for your reference:

     

    How to Fix Sysprep was not able to validate your Windows installation".

    https://www.wintips.org/fix-sysprep-not-able-validate-windows-installation/

     

    Note: This is a third-party link and we do not have any guarantees on this website. And Microsoft does not make any guarantees about the content.

     

    Hope these are helpful. If you have any question, please feel free to let me know.


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Friday, April 19, 2019 6:38 AM
    Moderator
  • Hi,

    Was your issue solved?

    If yes, would you like to share your solution in order that other community members could find the helpful reply quickly.

    If no, please reply and tell us the current situation in order to provide further help.

    Best


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Monday, April 22, 2019 9:04 AM
    Moderator
  • Hi, 

    Thank you for your reply.

    I have follow the above suggestion but the problem has not been solved. I can't find any solution on internet because it is a new windows version (1903). 

    Anyway, Could you tell me how to open the case in Microsoft Support ? 

    Regards !

    Andrew

    Thursday, April 25, 2019 8:03 AM
  • Thanks God !

    The problem has been solved. According the log file, "Sysprep_Clean_Validate_Opk" is from C:\Windows\System32\spopk.dll. I try to replace the "spopk.dll" from another Windows 10 (nor 1903). The sysprep is working.

    I compare the two versions "spopk.dll". The file size is not same. I think Microsoft had modified the file.

    • Marked as answer by AndrewhHo Friday, April 26, 2019 7:56 AM
    Friday, April 26, 2019 7:56 AM
  • UPDATE: Now resolved after installing the  Cumulative Update of 05 2019


    ASEBB

    • Proposed as answer by LV-ATX Thursday, May 30, 2019 8:30 PM
    Tuesday, May 21, 2019 8:55 AM
  • Worked perfectly for me on a new 1903 image.  Changed  ownership of spopk.dll to administrators, gave full permissions, renamed to .old and replaced the file from my current 1809 machine.  Sysprep worked fine and is creating my WIM now.
    Wednesday, May 29, 2019 12:19 PM
  • Thank you sooo much! I copied the spopk.dll file from a computer running Win10 ver 1809 and it worked beautiful!
    Thursday, May 30, 2019 4:56 PM
  • UPDATE: Now resolved after installing the  Cumulative Update of 05 2019


    ASEBB

    This update did the trick! Thanks for posting!
    Thursday, May 30, 2019 8:32 PM
  • UPDATE: Now resolved after installing the  Cumulative Update of 05 2019


    ASEBB

    I installed this update and still failed. Replacing the SPOPK.DLL did the trick for me
    Friday, May 31, 2019 11:10 AM
  • Thanks God !

    The problem has been solved. According the log file, "Sysprep_Clean_Validate_Opk" is from C:\Windows\System32\spopk.dll. I try to replace the "spopk.dll" from another Windows 10 (nor 1903). The sysprep is working.

    I compare the two versions "spopk.dll". The file size is not same. I think Microsoft had modified the file.

    Many thanks for posting the solution. I was pulling my hair out on this issue :-) 
    Friday, May 31, 2019 11:11 AM
  • Thanks God !

    The problem has been solved. According the log file, "Sysprep_Clean_Validate_Opk" is from C:\Windows\System32\spopk.dll. I try to replace the "spopk.dll" from another Windows 10 (nor 1903). The sysprep is working.

    I compare the two versions "spopk.dll". The file size is not same. I think Microsoft had modified the file.

    This fixed my issue as well. I was using Dell Image Assist (uses Sysprep) to take my image and I was getting the same error in the setupact.log. Running the May update didn't make a difference for me.

    As an additional note you need to take ownership of the spopk.dll file and grant permissions to replace the file.

    Take ownership of the file:

    takeown /f C:\Windows\System32\spopk.dll

    Grant ability to modify file:

    icacls C:\Windows\System32\spopk.dll /Grant Administrators:f

    • Edited by Rockfordrt Monday, June 3, 2019 4:37 PM added additional information
    Monday, June 3, 2019 4:31 PM
  • I had the same problem - replacing the SPOPK.DLL with a previous version (1809) allows the sysprep to run.
    (The only thing is to be able to access the faulty one you need to take ownership of the file and then drop the security - I did it all the way down to "Everyone Full control" - low enough to remove it.

    Wednesday, June 5, 2019 10:11 AM
  • The Windows product team is following this thread and wanted to relay the following points 

    • This failures means that an update from WU is currently using reserved storage. Audit mode cannot be entered while reserves are in use. More information on reserved storage is available @

      https://techcommunity.microsoft.com/t5/Storage-at-Microsoft/Windows-10-and-reserved-storage/ba-/428327
    • This issue should NOT be worked around by copying binaries from other OS releases 
    • Restricting WU updates is a temporary way to circumvent this problem.
    • PG is reviewing this issue and will post an update as to how to better handle this issue. 

    Good if you could share EXACT steps to repro this issue.....

    Friday, June 7, 2019 3:03 PM
  • Ran into the same sysprep error  in the logs when I used MDT to capture a newly built v1903 disk image.  The CU5-2019 update was already installed from applying all Windows Updates before the capture.  Didn't want to resort to copying the spopk.dll file from the previous v1809 installation or make manual permissions to the existing file just yet,  so I tried simply toggling the new "Pause Updates for 7 days" option before running the MDT capture sequence and MDT ran through the sysprep process and disk capturing sequence without a hitch.
    • Edited by ADGAdmin Friday, June 7, 2019 4:05 PM
    • Proposed as answer by Schloemer Friday, August 9, 2019 11:05 AM
    Friday, June 7, 2019 4:03 PM
  • i had installed CU5 (KB4497935) , and the problem is still the same.

    and after installed the CU5, my spopk.dll version is 10.0.18362.1 ,the Date of the dll is 2019/03/19 12:44...

    it seems the file is not replace by the CU5...but the winver is 18362.145 now

    Sunday, June 9, 2019 8:54 AM
  • Pausing updates temporarily (and then resuming) worked for me...  once.  And now I can't get it to work again, unfortunately, after multiple attempts.  But definitely worth a shot for anyone running into this issue.
    Monday, June 10, 2019 1:07 AM
  • Hello!

    The key here may be to be absolutely doubly certain that all updates have processed.

    I had this issue also, system was (so I believed) fully up-to-date with June Cumulatives (it had just rebooted from that install).  However, the sysprep failed with the error mentioned in these posts.

    I reverted my VM to pre-sysprep stage and checked for updates, based on your comment about "An active WU scenario".  A Defender Definition update came through.  I then executed my pre-sysprep routine and sysprepped.  The sysprep dialog went away - where the system usually shuts down - but never did.  I'm writing that off to cosmic radiation (can't you guys harden the OS against that? ;-)

    Anyway, I reverted again, installed the Defender update again, and sysprep went smoothly.  So while pausing updates sounds like a possible solution, it might be that there is at least one more update in the pipe, which would often be the case just prior to a sysprep when you've got a machine being brought up to date from a base image of some sort.

    Thank you to the product team for monitoring these posts.  I don't suppose it would be viable to have a button to 'clear reserved storage' specifically for situations like sysprep (or even part of the sysprep execution)?  If that meant that whatever update was in an 'active scenario' just had to be discovered again, I think that would be preferable.  Of course, if it broke an in-progress update, I guess that wouldn't be so good!



    • Edited by GCC_CSS Sunday, June 23, 2019 12:51 PM reboot -> shutdown after sysprep
    Sunday, June 23, 2019 12:50 PM
  • Worked for me.


    Wednesday, July 3, 2019 7:52 PM
  • Nothing worked for me. This image worked fine in July, but after update to August 13, 2019—KB4512508 (OS Build 18362.295)

    it came with this error ( Sysprep_Clean_Validate_Opk: Audit mode can't be turned on if there is an active scenario.; hr = 0x800F0975 ) - how MORE CRYPTIC these messages can get?

    All updates are definitely done. Suspending WU makes zero difference

    Replacing the .dll from 1809 RS5 171763.292 15/02/2019 did the trick

    Seb

    • Edited by scerazy Friday, August 16, 2019 9:19 AM
    Friday, August 16, 2019 8:59 AM
  • This worked for me as well. After this fix I had to uninstall about a handful of packages as well. Which wasn't a big deal. Once I got through all this it's working 100%. THANK YOU! 

    Windows 10 ver 1903 Version 10.0.18362.295
    Had to give the account I was using full access to c:\windows\system32 renamed spopk.dll to spopk.old

    Used spopk.dll from Windows 10 ver 1809 Version 10.0.17763.615. 

    spopk.dll ver that didn't work - 10.0.18362.1

    spopk.dll ver that DID work - 10.0.17763.292


    "In victory, be humble. In defeat, be strong. In all things be fair." - Hu Lee

    Friday, August 16, 2019 4:43 PM
  • No need to mess with permissions, just use nsudo.

    I user 7-zip FM running as TruestedInstaller (way easier) for any replacements (like that one)

    • Edited by scerazy Wednesday, August 21, 2019 8:09 PM
    Friday, August 16, 2019 9:01 PM
  • Worked for me, thanks.
    Wednesday, August 21, 2019 3:44 PM
  • Perfect! The same worked for me also. Thanks
    Wednesday, August 21, 2019 4:34 PM
  • Thank you! Replacing the .dll file from 1809 did the trick as well!
    Thursday, September 12, 2019 3:23 PM