The use of Sysprep resulted in the loss of personal files / 使用了Sysprep导致个人文件丢失

Question

The use of Sysprep resulted in the loss of personal files / 使用了Sysprep导致个人文件丢失

ThanksForSupporting&Hardwork 20

你好，感谢你愿意阅读我的求助，为方便理解我使用汉语和英语分别描述我的问题。Hello, thank you for taking the time to read my request for assistance. To facilitate understanding, I will describe my issue separately in both Chinese and English.

中文Chinese:

因为一些误解，我根据网页教程，在Windows11 下使用了sysprep.exe (C:\Windows\System32\Sysprep)。在重新进入系统后，发现C:\Users\Administrator（原来使用的用户账户）下文件全部丢失。（不是所有C盘下的文件全部丢失，如C:\Program Files下）

当我使用 sysprep.exe 时，设置可能如下（不确定）：用户的图像

现在我有没有可能通过任何方法恢复我的文件？我找到一个文件FactoryApps_TU.ppkg(C:\Recovery\Customizations)，但不确定它是否可以用于恢复我的文件，也无法打开他。有人可以帮助我吗？非常感谢。用户的图像

注：使用 sysprep.exe后，在OOBE流程时，我又根据网页教程激活了内置管理员账户（CMD net user)，没有进行OOBE而是可能在审计模式下（Audit Mode）进入了系统，我不确定是否会有影响。

----------------------------------------------------------------------------------------------------

Eng:

As a misunderstanding, I used sysprep.exe (C:\Windows\System32\Sysprep) in Windows 11 following an online tutorial. After re-entering the system, I discovered that all files under C:\Users\Administrator (my original user account) were missing. (Not all files under the C drive are lost, such as those under C:\Program Files)

When I used sysprep.exe, the settings may be as follows(not sure): 用户的图像

Is there any way to recover my files now? I found a file named FactoryApps_TU.ppkg (C:\Recovery\Customizations), but I'm unsure if it can be used for recovery and cannot open it. Can anyone help?Thanks very much. 用户的图像

Note: After running sysprep.exe, before the OOBE process, I reactivated the built-in administrator account (using CMD net user) and may have entered the system in Audit Mode, Instead of completing OOBE, following online instructions. I am unsure whether this could have impacted the issue.

2 个答案

你的答案

Answer 1

Hello,

When you run sysprep.exe (if the /generalize option was used), the system resets the Windows installation to a default state for a new user. Because the built-in Administrator account is disabled by default in a fresh Windows environment, Sysprep typically deletes or resets the profile to prepare for the OOBE.

Steps for recovery:

Check for renamed folders: Navigate to C:\Users\ in File Explorer. Look for folders named Administrator.000, Administrator.[ComputerName], or TEMP. Sometimes the old profile is unlinked rather than fully deleted.
Check Windows.old: Check if a folder named C:\Windows.old\Users\Administrator exists on your drive.

Next steps:

If your files are not found in the folders mentioned in Step 1 or 2, the data might have been deleted from the file system.
Stop writing data to the C: drive immediately to prevent overwriting the "ghost" data.
Your only remaining option is to use third-party data recovery software to scan the drive for deleted files.

If the information provided was useful, please kindly Accept Answer. This will help other community members find the solution and allow us to close this inquiry.

Answer 2

ChandyL 1,710 志愿者审查方

最可能的情况是现在你的Sysprep加上后续你重新用OOBE创建了新的用户Profile，旧的Profile可能已经被覆盖。

如果这些文件很重要，我建议立即停止使用系统，避免磁盘写入新的东西。并尽快借助数据恢复工具来查找这些数据