Local Account not being created/locking me out

[goldenclick]

Hello all,

I sysprepped my system and extracted a install.wim to create a bootable USB to install windows. It seems as though everything in the unattend file is being applied EXCEPT for the creation of a local account.

I had specified that a local account called admin with password 1234 should be created. Initially plaintext was set to false, so when I would install the account would indeed be there but I wasn't able to logon with the password ( I am guessing it was being encrypted).

I then changed plaintext to false and now it doesn't even create the account and I have to login through safemode since I deleted all other accounts is system audit mode.

Here is my unattend file, can anyone make a suggestion as to why this might not be working? thanks in advance.

<?xml version="1.0" encoding="utf-8"?>

<unattend xmlns="urn:schemas-microsoft-com:unattend">

<settings pass="generalize">

<component name="Microsoft-Windows-Deployment" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">

<ExtendOSPartition>

<Extend>true</Extend>

</ExtendOSPartition>

</component>

</settings>

<settings pass="windowsPE">

<component name="Microsoft-Windows-Setup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">

<DiskConfiguration>

<Disk wcm:action="add">

<CreatePartitions>

<CreatePartition wcm:action="add">

<Extend>true</Extend>

<Order>1</Order>

<Type>Primary</Type>

</CreatePartition>

</CreatePartitions>

<DiskID>0</DiskID>

<WillWipeDisk>true</WillWipeDisk>

</Disk>

</DiskConfiguration>

</component>

</settings>

<settings pass="specialize">

<component name="Microsoft-Windows-UnattendedJoin" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">

<Identification>

<Credentials>

<Domain>cs.loc</Domain>

<Password>1234</Password>

<Username>administrator</Username>

</Credentials>

<JoinDomain>cs.loc</JoinDomain>

<UnsecureJoin>true</UnsecureJoin>

</Identification>

</component>

<component name="Microsoft-Windows-Shell-Setup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">

<CopyProfile>true</CopyProfile>

<RegisteredOwner>SRCS</RegisteredOwner>

<TimeZone>Pacific Standard Time</TimeZone>

<ComputerName>*</ComputerName>

<RegisteredOrganization>SRCS</RegisteredOrganization>

<ProductKey>W4PFP-TJXBG-34FTQ-BGQHW-BPF6G</ProductKey>

</component>

</settings>

<settings pass="oobeSystem">

<component name="Microsoft-Windows-International-Core" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">

<InputLocale>en-us</InputLocale>

<SystemLocale>en-us</SystemLocale>

<UILanguage>en-us</UILanguage>

<UILanguageFallback>en-us</UILanguageFallback>

<UserLocale>en-us</UserLocale>

</component>

<component name="Microsoft-Windows-Shell-Setup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">

<OOBE>

<HideEULAPage>true</HideEULAPage>

<HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>

<NetworkLocation>Work</NetworkLocation>

<ProtectYourPC>3</ProtectYourPC>

<SkipMachineOOBE>true</SkipMachineOOBE>

<SkipUserOOBE>true</SkipUserOOBE>

</OOBE>

<RegisteredOrganization>SRCS</RegisteredOrganization>

<RegisteredOwner>SRCS</RegisteredOwner>

<AutoLogon>

<Password>

<Value>1234</Value>

<PlainText>true</PlainText>

</Password>

<LogonCount>1</LogonCount>

<Username>admin</Username>

<Enabled>true</Enabled>

</AutoLogon>

</component>

</settings>

<settings pass="auditSystem">

<component name="Microsoft-Windows-Shell-Setup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">

<UserAccounts>

<LocalAccounts>

<LocalAccount wcm:action="add">

<Password>

<Value>1234</Value>

<PlainText>true</PlainText>

</Password>

<Description>Technology Department Administrators</Description>

<DisplayName>Admin</DisplayName>

<Group>Administrators</Group>

<Name>Admin</Name>

</LocalAccount>

</LocalAccounts>

</UserAccounts>

</component>

</settings>

<cpi:offlineImage cpi:source="wim:d:/sources/install.wim#Windows 7 PROFESSIONAL" xmlns:cpi="urn:schemas-microsoft-com:cpi" />

</unattend>

[Tripredacus]

You need to add the account in oobeSystem pass and not Audit pass. If Audit mode is specified (it isn't in your XML example) Windows will log in using the built-in Administrator account.