Captured install images should be generalized most of the time, to prevent the issue of duplicate SID's.
Until recently, it didn't matter if you used the same non-generalized image on multiple PC's But a security change in the Sep. 2025 (and later) Monthly Update now checks for duplicate SID's. When a duplicate SID is detected, Windows will not allow file sharing or Remote Desktop with the other PC.
1. From the
Registry screen, add this reg file to prevent UWP (Store) apps from updating, while you're in sysprep:
Code:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsStore\WindowsUpdate]
"AutoDownload"=dword:00000002
2. Boot into audit mode. Apply your Windows customizations.
3. Generalize will unload (but not remove) all installed 3rd-party drivers. If you want the image to keep the same drivers loaded:
Code:
reg add HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\SysprepSettings\sppnp /v PersistAllDeviceInstalls /t REG_DWORD /d 1 /f
4. Run sysprep /generalize:
Code:
sysprep.exe /generalize /shutdown /oobe
5. Boot into WinPE or Recovery, and run your DISM capture. It's important you don't boot from a live system when you want to capture it.
The /generalize will remove the system's SID, and all user accounts (including any MS Account credentials).