An ISO is finished when testing says so, not when the build tool says so. This is the full sign-off a custom image should pass — in a VM, on real hardware, and against Windows Update — before it earns a place on a customer's PC.
Every other page in this series prevents a class of failure. This page is the net that catches what prevention missed. The checklist below is deliberately strict — a master ISO that passes it can be installed on a customer's only computer with a straight face, and one that fails any line goes back to the bench, not into the field with fingers crossed. Run it for every new master, and the fast subset of it for every monthly refresh.
slmgr.vbs /dli on licensed hardwarereagentc /info on the running system confirms it is enabled and present) and start one recovery toolAn ISO that clears all four gates is no longer a project — it is equipment. Treat it that way and it will repay you on every install.
Every checkbox, removal and bypass option from this page is shown live in the full video — watch it end to end before you build your own ISO.
▶️ Watch Full VideoAbout an hour of mostly unattended time for a new master: the VM install and updates run themselves while you do other work. The monthly refresh needs only the fast subset — VM install, one full update run, Store and activation checks.
You can, but you are accepting the exact risk the VM cannot see — storage controllers, firmware and OEM hardware behaviour. Borrow any old real machine for the first release of a master line; after that, monthly refreshes can reasonably be VM-only.
The second Windows Update run. Builders test that the image installs; the component-store damage from aggressive removal only shows itself when the servicing system does real work, which for most people is the customer's first Patch Tuesday.