Windows 10 Capture issue

[ncava001]

Capture seems to freeze when it gets to the sysprep. If freezes about halfway through. When rebooting I get the attached screen.

[cmcannady]

What errors do you see in the OSD logs on the targeted endpoint?

[JasonWalker]

It froze during sysprep, in the normal/running OS?

Rather than restarting, review the Sysprep logs.
Check for setupact.log and setuperr.log at these locations -
C:\Windows\Panther
C:\Windows\Panther\UnattendGC
C:\Windows\Sysprep\Panther

I’ve seen errors before when sysprep’ing a Windows 10 machine that had features installed that were removed in a later update…I think ‘miracast’ may have been involved but this was several years ago. If you get some of the sysprep error messages from near the end of the sysprep logs though we can try to help you figure it out.

[ncava001]

I checked the folders and found the attached. Also got this red error notification this time around.

[MMosley]

Sysprep and windows 10 do not communicate very well. I remember back when I had to force stop windows store updates and remove provisioned apps for sysprep to capture an image. Not sure if it is related, but just my experience with it.

[ncava001]

Thanks! I tried that as well but no joy.

[ncava001]

2020-11-05 10:54:08, Info [0x064047] IBSLIB MarkUnattendSettingAsProcessed: Marking unattend setting [SetupComplianceCheck] as processed.
2020-11-05 10:54:08, Info [0x064047] IBSLIB MarkUnattendSettingAsProcessed: Marking unattend setting [RegionalSettings] as processed.
2020-11-05 10:54:08, Info [0x0605fb] IBS Callback_Locale_ProcessUnattendSettings: Layered Driver from downlevel system [0]
2020-11-05 10:54:08, Info IBS CallBack_Unattend_InitiatePass: Initiating unattend settings pass [specialize]
2020-11-05 10:54:08, Info [setup.exe] Current pass status for [specialize] is [0x0]
2020-11-05 10:54:08, Info [setup.exe] Applying data-only settings overrides using SMI…
2020-11-05 10:54:08, Info CSI 00000001@2020/11/5:16:54:08.119 WcpInitialize: wcp.dll version 10.0.18362.1012 (WinBuild.160101.0800)
2020-11-05 10:54:08, Info [setup.exe] Successfully applied data-only settings overrides.
2020-11-05 10:54:08, Info [setup.exe] Calling into RunSMIActionPass to execute unattend GCs for pass [specialize]
2020-11-05 10:54:08, Info [setup.exe] [Action Queue] : GenerateActionQueue begin
2020-11-05 10:54:08, Info [setup.exe] [Action Queue] : Processing pass = specialize
2020-11-05 10:54:08, Info [setup.exe] [Action Queue] : Generating queue file to C:\windows\panther\actionqueue\specialize.uaq
2020-11-05 10:54:08, Info [setup.exe] [Action Queue] : Identity 0: Microsoft-Windows-Shell-Setup, Culture=neutral, Version=10.0.18362.1, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=amd64, versionScope=NonSxS
2020-11-05 10:54:08, Info [setup.exe] [Action Queue] : Identity 1: Microsoft-Windows-SystemRestore-Main, Culture=neutral, Version=10.0.18362.657, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=amd64, versionScope=NonSxS
2020-11-05 10:54:08, Info [setup.exe] [Action Queue] : Identity 2: Microsoft-Windows-TapiSetup, Culture=neutral, Version=10.0.18362.1, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=amd64, versionScope=NonSxS
2020-11-05 10:54:08, Info [setup.exe] [Action Queue] : Identity 3: Microsoft-Windows-Deployment, Culture=neutral, Version=10.0.18362.1, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=amd64, versionScope=NonSxS
2020-11-05 10:54:08, Info [setup.exe] [Action Queue] : Identity 4: Microsoft-Windows-IE-InternetExplorer, Culture=neutral, Version=11.0.18362.1, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=amd64, versionScope=NonSxS
2020-11-05 10:54:08, Info [setup.exe] [Action Queue] : Identity 5: Microsoft-Windows-UnattendedJoin, Culture=neutral, Version=10.0.18362.1, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=amd64, versionScope=NonSxS
2020-11-05 10:54:08, Info [setup.exe] [Action Queue] : Identity 6: Microsoft-Windows-International-Core, Culture=neutral, Version=10.0.18362.657, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=amd64, versionScope=NonSxS
2020-11-05 10:54:08, Info [setup.exe] [Action Queue] : Using component order file C:\windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.18362.1012_none_171983fb2a153d25\GlobalInstallOrder.xml
2020-11-05 10:54:08, Info CSI 00000001@2020/11/5:16:54:08.135 WcpInitialize: wcp.dll version 10.0.18362.1012 (WinBuild.160101.0800)
2020-11-05 10:54:08, Info [setup.exe] [Action Queue] : Found manifest file C:\windows\Winsxs\Manifests\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_11.0.18362.1_none_35b0eadd0210cd80.manifest
2020-11-05 10:54:08, Info [setup.exe] [Action Queue] : Found manifest file C:\windows\Winsxs\Manifests\amd64_microsoft-windows-deployment_31bf3856ad364e35_10.0.18362.1_none_ce4c66c66a867103.manifest
2020-11-05 10:54:08, Info [setup.exe] [Action Queue] : Found manifest file C:\windows\Winsxs\Manifests\amd64_microsoft-windows-international-core_31bf3856ad364e35_10.0.18362.657_none_3f799bf06b61114f.manifest
2020-11-05 10:54:08, Info [setup.exe] [Action Queue] : Found manifest file C:\windows\Winsxs\Manifests\amd64_microsoft-windows-shell-setup_31bf3856ad364e35_10.0.18362.1_none_a4b842a766d89d7c.manifest
2020-11-05 10:54:08, Info [setup.exe] [Action Queue] : Found manifest file C:\windows\Winsxs\Manifests\amd64_microsoft-windows-systemrestore-main_31bf3856ad364e35_10.0.18362.657_none_9caf074f44df0f42.manifest
2020-11-05 10:54:08, Info [setup.exe] [Action Queue] : Found manifest file C:\windows\Winsxs\Manifests\amd64_microsoft-windows-tapisetup_31bf3856ad364e35_10.0.18362.1_none_3c509abf186274c1.manifest
2020-11-05 10:54:08, Info [setup.exe] [Action Queue] : Found manifest file C:\windows\Winsxs\Manifests\amd64_microsoft-windows-unattendedjoin_31bf3856ad364e35_10.0.18362.1_none_8572549aea0d0d0c.manifest
2020-11-05 10:54:08, Info [setup.exe] [Action Queue] : GenerateActionQueue finish (hr = 0x0)
2020-11-05 10:54:08, Info [setup.exe] [Action Queue] : ProcessActionQueue start
2020-11-05 10:54:08, Info [setup.exe] [Action Queue] : ProcessActionQueue using queue file C:\windows\panther\actionqueue\specialize.uaq
2020-11-05 10:54:08, Info [setup.exe] [Action Queue] : Command Line = C:\WINDOWS\SYSTEM32\IEUNATT.EXE / arguments = / pass = specialize / manifest path = C:\windows\Winsxs\Manifests\amd64_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_11.0.18362.1_none_35b0eadd0210cd80.manifest
2020-11-05 10:54:08, Info [setup.exe] [Action Queue] : Command Line = C:\WINDOWS\SYSTEM32\SETUPUGC.EXE / arguments = / pass = specialize / manifest path = C:\windows\Winsxs\Manifests\amd64_microsoft-windows-deployment_31bf3856ad364e35_10.0.18362.1_none_ce4c66c66a867103.manifest
2020-11-05 10:54:08, Info [setup.exe] [Action Queue] : Command Line = C:\WINDOWS\SYSTEM32\MUIUNATTEND.EXE / arguments = / pass = specialize / manifest path = C:\windows\Winsxs\Manifests\amd64_microsoft-windows-international-core_31bf3856ad364e35_10.0.18362.657_none_3f799bf06b61114f.manifest
2020-11-05 10:54:08, Info [setup.exe] [Action Queue] : Command Line = C:\WINDOWS\SYSTEM32\RUNDLL32.EXE / arguments = shsetup.dll,SHUnattendedSetup / pass = specialize / manifest path = C:\windows\Winsxs\Manifests\amd64_microsoft-windows-shell-setup_31bf3856ad364e35_10.0.18362.1_none_a4b842a766d89d7c.manifest
2020-11-05 10:54:08, Info [setup.exe] [Action Queue] : Command Line = C:\WINDOWS\SYSTEM32\TAPIUNATTEND.EXE / arguments = / pass = specialize / manifest path = C:\windows\Winsxs\Manifests\amd64_microsoft-windows-tapisetup_31bf3856ad364e35_10.0.18362.1_none_3c509abf186274c1.manifest
2020-11-05 10:54:08, Info [setup.exe] [Action Queue] : Command Line = C:\WINDOWS\SYSTEM32\DJOIN.EXE / arguments = / pass = specialize / manifest path = C:\windows\Winsxs\Manifests\amd64_microsoft-windows-unattendedjoin_31bf3856ad364e35_10.0.18362.1_none_8572549aea0d0d0c.manifest
2020-11-05 10:54:08, Info [setup.exe] [Action Queue] : Executing command “C:\WINDOWS\SYSTEM32\IEUNATT.EXE” specialize
2020-11-05 10:54:08, Info [setup.exe] [Action Queue] : process exit code = 0
2020-11-05 10:54:08, Info [setup.exe] [Action Queue] : Unattend action returned operation complete.
2020-11-05 10:54:08, Info [setup.exe] [Action Queue] : Executing command “C:\WINDOWS\SYSTEM32\SETUPUGC.EXE” specialize
2020-11-05 10:54:08, Info [setup.exe] [Action Queue] : process exit code = 0
2020-11-05 10:54:08, Info [setup.exe] [Action Queue] : Unattend action returned operation complete.
2020-11-05 10:54:08, Info [setup.exe] [Action Queue] : Executing command “C:\WINDOWS\SYSTEM32\MUIUNATTEND.EXE” specialize
2020-11-05 10:54:09, Info [setup.exe] [Action Queue] : process exit code = 0
2020-11-05 10:54:09, Info [setup.exe] [Action Queue] : Unattend action returned operation complete.
2020-11-05 10:54:09, Info [setup.exe] [Action Queue] : Executing command “C:\WINDOWS\SYSTEM32\RUNDLL32.EXE” shsetup.dll,SHUnattendedSetup specialize
2020-11-05 10:54:09, Info [setup.exe] [Action Queue] : process exit code = 1
2020-11-05 10:54:09, Info [setup.exe] [Action Queue] : Unattend action requested delayed reboot.
2020-11-05 10:54:09, Info [setup.exe] [Action Queue] : Executing command “C:\WINDOWS\SYSTEM32\TAPIUNATTEND.EXE” specialize
2020-11-05 10:54:09, Info [setup.exe] [Action Queue] : process exit code = 0
2020-11-05 10:54:09, Info [setup.exe] [Action Queue] : Unattend action returned operation complete.
2020-11-05 10:54:09, Info [setup.exe] [Action Queue] : Executing command “C:\WINDOWS\SYSTEM32\DJOIN.EXE” specialize
2020-11-05 10:54:12, Info [setup.exe] [Action Queue] : process exit code = 1
2020-11-05 10:54:12, Info [setup.exe] [Action Queue] : Unattend action requested delayed reboot.
2020-11-05 10:54:12, Info [setup.exe] [Action Queue] : ProcessActionQueue finish (hr = 0x2c1000)
2020-11-05 10:54:12, Info [setup.exe] One or more unattend GCs requested a delayed reboot; we will reboot the computer
2020-11-05 10:54:12, Info [0x0606cc] IBS Flushing registry to disk…
2020-11-05 10:54:12, Info [0x0606cc] IBS Flush took 16 ms.
2020-11-05 10:54:12, Info IBS Callback_Unattend_InitiatePass: An unattend action requested a pending reboot; we’ll restart the computer after Setup finishes…
2020-11-05 10:54:12, Info [0x06036b] IBS Callback_SystemRestore: Successfully set System Restore state.
2020-11-05 10:54:12, Info IBSLIB ModifyBootEntriesLegacy: Not a PCAT machine. There should be no boot.ini containing legacy boot options.
2020-11-05 10:54:12, Info IBSLIB ModifyBootEntriesBCD:Setup phase is [4]
2020-11-05 10:54:12, Info IBSLIB ModifyBootEntriesBCD:Boot entries are handled externally. Exiting.
2020-11-05 10:54:12, Info [0x060215] IBS CallBack_MungeBootEntries:Successfully modified boot entries
2020-11-05 10:54:12, Info [0x0605f6] IBS Callback_Locale_InstallLayerDriver: The layer driver setting is missing or invalid: ignoring optional setting.
2020-11-05 10:54:12, Info [0x0600b6] IBS Callback_Unattend_Serialize:Unattend file path is C:\windows\Panther\unattend.xml
2020-11-05 10:54:12, Info IBS Callback_CleanupSensitiveBBData: Replacing entries under blackboard; entering new OS.
2020-11-05 10:54:12, Info IBS Callback_CleanupSensitiveBBData: Finished clearing data; 0 items cleared.
2020-11-05 10:54:12, Info [0x090093] PANTHR WdsEnableExit called! When group #105 is empty, execution will stop, and the queue will be saved.
2020-11-05 10:54:12, Info [0x070042] DIAG CallBack_DiagnosticDataSend: Called with notification for SetupPhaseDone published by Engine
2020-11-05 10:54:12, Info DIAG CallBack_DiagnosticDataSend: Setup was started from Phase 4. Disabling Diagnostics [DiagnosticDataSend] in this scenario
2020-11-05 10:54:12, Info [0x090092] PANTHR WdsEnableExit already called
2020-11-05 10:54:12, Info UI CallbackShowFinishOnline: Enter
2020-11-05 10:54:12, Info UI CallbackShowFinishOnline: Exit
2020-11-05 10:54:12, Info [0x09008e] PANTHR SeqExecute – stopping, since termination group reached
2020-11-05 10:54:12, Info [0x090086] PANTHR pWorkerThreadFunc – Stopping
2020-11-05 10:54:12, Info [0x090086] PANTHR pWorkerThreadFunc – Stopping
2020-11-05 10:54:12, Info [0x090086] PANTHR pWorkerThreadFunc – Stopping
2020-11-05 10:54:12, Info [0x0900c7] PANTHR SEQ EVENT_SERIALIZE_BEFORE_EXIT Received. Will only save modules with persistent subscriptions!
2020-11-05 10:54:12, Info [0x0900b7] PANTHR SerializeToFile: C:\windows\Panther\MainQueueOnline0.que
2020-11-05 10:54:12, Info [0x0900b8] PANTHR Saving Main Event Queue
2020-11-05 10:54:12, Info [0x0900b9] PANTHR Saving Permanent Event Queue
2020-11-05 10:54:12, Info [0x0900c5] PANTHR Queue Serialization Succeeded
2020-11-05 10:54:12, Info PANTHR DeleteCriticalSection for pExecQueue->csLock;
2020-11-05 10:54:12, Info [0x0605a6] IBS Requested UI to hide the language and locale selection pages.
2020-11-05 10:54:12, Info [0x090081] PANTHR Destroying any unreferenced modules! (SEQ6)
2020-11-05 10:54:12, Info [0x0601dc] IBS Setup has completed phase 4 at 2020-11-05 10:54:12
2020-11-05 10:54:12, Info IBS Successfully logged OS information onto event viewer system channel
2020-11-05 10:54:12, Info [0x0601e1] IBS InstallWindows:First boot phase of setup done!!!
2020-11-05 10:54:12, Info IBS InstallWindows:Exiting with return code [0x0]
2020-11-05 10:54:12, Info [0x090009] PANTHR CBlackboard::Close: c:\windows\panther\setupinfo.
2020-11-05 10:54:12, Info CBS Trusted Installer signaled for shutdown, going to exit.
2020-11-05 10:54:12, Info CBS Trusted Installer is shutting down because: SHUTDOWN_REASON_NOTIFICATION:PRESHUTDOWN
2020-11-05 10:54:12, Info CBS Ending the TrustedInstaller main loop.
2020-11-05 10:54:12, Info CBS Starting TrustedInstaller finalization.
2020-11-05 10:54:12, Info CBS Lock: Lock removed: WinlogonNotifyLock, level: 8, total lock:6
2020-11-05 10:54:12, Info CBS Ending TrustedInstaller finalization.
2020-11-05 10:55:06, Info CBS TI: — Initializing Trusted Installer —
2020-11-05 10:55:06, Info CBS TI: Last boot time: 2020-11-05 10:54:38.499
2020-11-05 10:55:06, Info CBS Starting TrustedInstaller initialization.
2020-11-05 10:55:06, Info CBS Lock: New lock added: CCbsPublicSessionClassFactory, level: 30, total lock:4
2020-11-05 10:55:06, Info CBS Lock: New lock added: CCbsPublicSessionClassFactory, level: 30, total lock:5
2020-11-05 10:55:06, Info CBS Lock: New lock added: WinlogonNotifyLock, level: 8, total lock:6
2020-11-05 10:55:06, Info CBS Ending TrustedInstaller initialization.
2020-11-05 10:55:06, Info CBS Starting the TrustedInstaller main loop.
2020-11-05 10:55:06, Info CBS TrustedInstaller service starts successfully.
2020-11-05 10:55:06, Info CBS Winlogon: Registering for CreateSession notifications
2020-11-05 10:55:06, Info CBS Winlogon: Loading SysNotify DLL
2020-11-05 10:55:06, Info CBS Winlogon: Starting notify server
2020-11-05 10:55:06, Info CBS Startup processing completed. [HRESULT = 0x00000000]
2020-11-05 10:55:06, Info CBS Failed to query registry value: TiAttemptedInitialization [HRESULT = 0x80070002 - ]
2020-11-05 10:55:06, Info CBS Winlogon: Simplifying Winlogon CreateSession notifications
2020-11-05 10:55:06, Info CBS Startup processing complete, Trusted Installer will now wait around for a little while to see if any clients show up.
2020-11-05 10:55:06, Info CBS Startup processing thread terminated normally
2020-11-05 10:55:06, Info CBS TI: Startup Processing completes, release startup processing lock.
2020-11-05 10:55:09, Info CBS Winlogon: TiCoreOnCreateSession has been called
2020-11-05 10:57:08, Info CBS Trusted Installer is shutting down because: SHUTDOWN_REASON_AUTOSTOP
2020-11-05 10:57:08, Info CBS Ending the TrustedInstaller main loop.
2020-11-05 10:57:08, Info CBS Starting TrustedInstaller finalization.
2020-11-05 10:57:08, Info CBS Winlogon: Stopping notify server
2020-11-05 10:57:08, Info CBS Winlogon: Unloading SysNotify DLL
2020-11-05 10:57:08, Info CBS Lock: Lock removed: WinlogonNotifyLock, level: 8, total lock:6
2020-11-05 10:57:08, Info CBS Ending TrustedInstaller finalization.

[JasonWalker]

I’m not sure that’s the right log file; it may be from an earlier or later run. This log references the “specialize” pass, which would run during deployment/setup; you need to find logs with the “generalize” pass, which run during Sysprep.