How To Create a Custom Windows ISO with Apps & Settings (Customer-ready image)

Creating a customer‑ready Windows ISO ensures a clean deployment that boots directly into OOBE, allowing the end user to configure their own account while benefiting from pre‑installed apps and system‑wide tweaks.

Install Windows & Enter Audit Mode

Boot from Windows installation media and install Windows normally.
At the OOBE screen (region/account setup), press Ctrl + Shift + F3 instead of creating an account.
The system reboots into Audit Mode using the built‑in Administrator account.

Note: Do not create personal accounts at this stage. Audit Mode is for system‑level customization only.

Prepare the Destination Disk

Ensure sufficient free space for image capture.

Customize the System

Install Software: Add required apps, drivers, and updates. Use winget --scope machine or Ninite for cleaner installs.
System‑Wide Settings: Apply registry tweaks under HKEY_LOCAL_MACHINE for privacy, updates, and performance.
Default Profile Settings: Use CopyProfile via unattend.xml to propagate settings to new users.

Registry Tweaks Example

Create a file named SystemTweaks.reg with entries such as disabling Cortana, Spotlight, OneDrive auto‑start, background apps, automatic driver updates, BitLocker device encryption, Fast Startup, and System Restore. Double‑click to apply.

Windows Registry Editor Version 5.00

; --- PRIVACY & UI ---
; Disable Cortana
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search]
"AllowCortana"=dword:00000000

; Disable Windows Tips, Spotlight, and Consumer Features (Bloatware)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CloudContent]
"DisableConsumerFeatures"=dword:00000001
"DisableWindowsConsumerFeatures"=dword:00000001
"DisableSoftLanding"=dword:00000001
"ConfigureWindowsSpotlight"=dword:00000002
"DisableWindowsSpotlightFeatures"=dword:00000001
"DisableThirdPartySuggestions"=dword:00000001
"DisableWindowsSpotlightOnSettings"=dword:00000001
"DisableWindowsSpotlightOnLockScreen"=dword:00000001

; Prevent OneDrive from auto-starting
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\OneDrive]
"DisableFileSyncNGSC"=dword:00000001

; Disable background apps system-wide
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy]
"LetAppsRunInBackground"=dword:00000002

; --- SYSTEM & UPDATES ---
; Disable Windows Store automatic updates
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore]
"AutoDownload"=dword:00000002

; Disable automatic driver updates via Windows Update
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
"ExcludeWUDriversInQualityUpdate"=dword:00000001

; Prevent automatic device encryption (BitLocker)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\BitLocker]
"PreventDeviceEncryption"=dword:00000001

; Disable Fast Startup (Ensures a clean boot for the customer)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Power]
"HiberbootEnabled"=dword:00000000

; Disable System Protection / System Restore
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore]
"DisableSR"=dword:00000001
"DisableConfig"=dword:00000001

Unattend File Example

<?xml version="1.0" encoding="utf-8"?>
<unattend xmlns="urn:schemas-microsoft-com:unattend">
    <settings pass="specialize">
        <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
            <CopyProfile>true</CopyProfile>
        </component>
    </settings>
</unattend>

Save as unattend.xml on the destination partition (e.g., F:).

Generalize with Sysprep

Option A, without CopyProfile:
C:\Windows\System32\Sysprep\sysprep.exe /oobe /generalize /shutdown
Option B, with CopyProfile:
C:\Windows\System32\Sysprep\sysprep.exe /oobe /generalize /shutdown /unattend:F:\unattend.xml

Boot into Recovery Environment

Use WinRE, WinPE, or Windows Installation Media.
Open Command Prompt via Troubleshoot → Advanced Options, or press Shift + F10 during setup.

Capture the Customized Image

diskpart
list volume
exit
mkdir F:\Scratch
dism /Capture-Image /ImageFile:F:\install.wim /CaptureDir:C:\ /Name:"Windows 11 Custom" /Description:"Windows 11 Custom Apr 2026" /Compress:max /CheckIntegrity /Verify /ScratchDir:F:\Scratch

Replace drive letters as appropriate. The ScratchDir prevents compression crashes.

Edit the ISO with AnyBurn

Download and install AnyBurn.
Download a Windows ISO from Microsoft.
Open AnyBurn → Edit Image File → Load ISO.
Replace install.wim or install.esd in sources with your custom file.
Save as Windows Custom.iso.

Final Result

You now have a bootable deployment ISO. When installed on any computer:

Windows boots directly into OOBE.
The customer sets up their own language, region, and account.
All pre‑installed apps, drivers, and system‑wide tweaks are ready.

Virtual Machine Note

On VirtualBox or similar, create a .vhd disk and attach it to the VM. Save your image file to it, then attach the same .vhd to the host machine using Disk Management. Alternatively, use a shared folder between host and VM.

This method ensures a professional, customer‑ready ISO that combines clean deployment with pre‑configured apps and system‑wide optimizations.

By following these steps, you can deliver a reliable Windows image that balances customization with flexibility for end users.