Hi Gary,
I would suggest that you use BIS-F for this purpose as it generalizes the VM. Also, after you have done the sysprep properly, it shouldn't be necessary again iirc. As far as I remember, the audit mode can only be reached during initial setup of Windows.
Best regards,
Raetke