sysprep questions

I am trying to work out how to sysprep a machine before taking an image
with dism and I'm running into a few questions.

- when I setup this image I did not use audit mode. I thought I could
work around this by setting in the unattend.xml to copy the
customizations of local profile to default profile. But I keep running
into "sysprep was not able to validate your windows installation..." and
it always ends up being some app package that was 'installed for a user
but not provisioned for all users' How do I get past this issue and is
this what audit mode is also meant to help you avoid? I have already
tried uninstalling the specific app package in powershell and tried
uninstalling all app packages thru powershell via the Get-AppPackage |
Remove-AppPackage command and still having same issue.

Also I have turned off bitlocker for this drive to make sure encryption
is not enabled. will the /oobe switch for sysprep re-enable bitlocker
encryption or do I need to do this manually?

Thanks.