WE used the logs in the panther directory to detect and id the modern aps that leak in to break sysprep.
Sysprep fails with Microsoft Store apps - Windows Client | Microsoft Learn
Microsoft flat out tells you to avoid the internet connection.
o resolve this issue, remove the package for the user who's running sysprep, and also remove the provisioning. To do this, follow these steps.
Note
To prevent Microsoft Store from updating apps, unplug the Internet connection or disable Automatic Updates in Audit mode before you create the image.
-
Run the Import-Module Appx PowerShell cmdlet.
-
Run Import-Module Dism.
-
Run Get-AppxPackage -AllUsers | Where PublisherId -eq 8wekyb3d8bbwe | Format-List -Property PackageFullName,PackageUserInformation.
Note
- In the output of this last cmdlet, check the users for whom the package is showing up as Installed. Delete these user accounts from the reference computer, or log on to the computer by using these user accounts. Then, run the cmdlet in step 4 to remove the
Appx package.
- This command lists all packages that were published by Microsoft and installed by any user of that reference computer. Because the computer is to be sysprepped, we assume that these user profiles no longer require the package.
- If you have manually provisioned apps that belong to other publishers, run the following command to list them:
Get-AppxPackage -AllUsers | Format-List -Property PackageFullName,PackageUserInformation