Sysprep Executor Detecting Defender on Win 10 1909
I'm currently attempting to prep a new Win 10 1909 Image. The VM is using a fresh install of Windows. When I run the Sysprep Executor (v126.96.36.199) it says Windows Defender is still running. I've tried turning it off manually and still get the same results.
Did you install any updates from Windows Updates?
Also if you manually disable the Real time protection, Does Windows Warns you about having Defender OFF?
(You should get a notifications from Windows, warning you about Defender being Disabled).
Have you tried running the Sysprep file manually?
(this sounds like an OS issue, remember the Sysprep Executor, is just a KACE front-end for the Microsoft Tool).
and if that fails check the panther directory logs for the specific error.
Copy the Answer file (unattend.xml) to windows\system32\sysprep
Open a command window
1- Go to the Sysprep Folder
2- Run this
sysprep /generalize /oobe /shutdown /unattend:c:\windows\system32\sysprep\unattend.xml
Post here the results.