Hi,
Thanks for your reply.
For the type of writefilters, EWF is being used. It is activated by the command "ewfmgr c: /enable".
The windows update service in the image is enabled and set to download and install updates automatically.
For test I have enabled the option:
OOBE>
<ProtectYourPC>3</ProtectYourPC>
</OOBE>
In the unattend.xml to see if that helps, I will post the result.
If there are any other tips, please let me know.