Yeah, this confirms the reseal parameters passed to sysprep as "/quiet /generalize /oobe /reboot"
So what might be happening, could just be a result of sysprep + settings used ... not saying there isn't a workaround, but the MS URL I provided previously seems to state that this is normal (locking the admin account when using the one parameter).