Sysprep Executor reports Antivirus detected when it has been disabled
I am trying to Sysprep a Windows Enterprise 1903 image using ver. 188.8.131.52 of Sysprep creator. The executor reports that Antivirus is detected but I have disabled it in group policy. Real time protection is definitely off.
Answer Chosen by the Author
OK so the real problem is:
Error SYSPRP Sysprep_Clean_Validate_Opk: Audit mode can't be turned on if there is an active scenario.; hr = 0x800F0975
Research along this line