Dynamic Windows 11 Setup TPM Bypass

shot² · Oct 3, 2021

Extract the Win11 iso contents to a USB stick (NTFS-formatted), copy the .bat to its root, reboot, Shift+F10 at first install screen, run the .bat, continue with installing, done.

Works beautifully on a 8-year old cheap notebook.

Dark Dinosaur · Oct 4, 2021

You need to login to view this posts content.

amoahfrank2013 · Oct 5, 2021

BAU said: ↑

Create bypass.bat or unzip attached in/to the usb stick you've made with windows 11 or the extracted ISO folder

Code:

::
del /f /q "%~dp0sources\appraiserres.dll"
reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\WinPE" || (start "11" "%~dp0setup.exe" &exit)
for %%X in (RAM SecureBoot Storage TPM) do reg add HKLM\SYSTEM\Setup\LabConfig /v Bypass%%XCheck /d 1 /t reg_dword /f
start "11" "%~dp0sources\setup.exe"
::

- Start setup from under windows for upgrades via bypass.bat
- Start setup from boot via Shift+F10 at the first windows 11 setup screen, then enter C:\bypass
(where C is the letter for the setup media, just try next until it starts i.e. D:\bypass E:\bypass)

Notes:
if you're gonna create a DVD instead of a bootable USB, delete sources\appraiserres.dll before burning

edit: or just create the iso / usb / live install via Universal MediaCreationTool.bat
if you need to modify an already made usb / extracted iso files, here's the standalone script:
Skip_TPM_Check_on_Media_Boot.cmd

Code:


@title Skip TPM Check on Media Boot & color 1e & echo on & (set media=%1)
::#  run from the root of the USB drive or ISO files to add reg overrides in sources\boot.wim via winpeshl.ini

@pushd "%~dp0" & if defined media pushd %media% & if not exist sources\boot.wim popd
@if not exist sources\boot.wim echo; SOURCES\BOOT.WIM NOT FOUND! & timeout /t 5 & exit/b
@fltmc>nul || (set _="%~f0" %* & powershell -nop -c start -verb runas cmd \"/d/x/rcall $env:_\"  & exit/b)
@dism /cleanup-wim & mkdir C:\ESD\AveYo>nul & set ini=C:\ESD\AveYo\Windows\System32\winpeshl.ini & (set By=By)
@dism /mount-wim /wimfile:sources\boot.wim /index:2 /mountdir:C:\ESD\AveYo & (set DO=commit) & if exist %ini% (set DO=discard)
 >%ini% echo;[LaunchApps]
>>%ini% echo;cmd, "/c reg add HKLM\SYSTEM\Setup\LabConfig /v %By%passTPMCheck /d 1 /t reg_dword /f"
>>%ini% echo;cmd, "/c reg add HKLM\SYSTEM\Setup\LabConfig /v %By%passSecureBootCheck /d 1 /t reg_dword /f"
>>%ini% echo;cmd, "/c reg add HKLM\SYSTEM\Setup\LabConfig /v %By%passStorageCheck /d 1 /t reg_dword /f"
>>%ini% echo;cmd, "/c reg add HKLM\SYSTEM\Setup\LabConfig /v %By%passRAMCheck /d 1 /t reg_dword /f"
>>%ini% echo;%%SYSTEMDRIVE%%\setup.exe
@dism /unmount-wim /mountdir:C:\ESD\AveYo /%DO% & rd /s /q C:\ESD\AveYo & del /f /q sources\appraiserres.dll>nul

If you need to bypass running setup.exe under windows / getting insider builds via windows update (after offlineinsiderenroll or something), here's the standalone toggle script (can also be directly pasted into powershell:
Skip_TPM_Check_on_Dynamic_Update_v1.cmd

Code:


@(set "0=%~f0"^)#) & powershell -nop -c iex([io.file]::ReadAllText($env:0)) & exit/b
#:: double-click to run or just copy-paste into powershell - it's a standalone hybrid script
#:: v1 of the toggle script works perfectly fine for most people with a non-botched windows installation
#:: uses a fast, fileless wmi subscription to watch for the Virtual Disk Service Loader process running during setup,
#:: then launches a cmd erase of appraiserres.dll - that's all there is to it, no rocket science, just a great implementation
#:: you probably don't need to have it installed at all times - just when doing feature updates or manual setup within windows
#:: hence the on off toggle just by running the script again

$_Paste_in_Powershell = {
  $N = 'Skip TPM Check on Dynamic Update';  $off = $false
  $0 = sp 'HKLM:\SYSTEM\Setup\MoSetup' 'AllowUpgradesWithUnsupportedTPMOrCPU' 1 -type dword -force -ea 0
  $0 = ri 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vdsldr.exe' -force -ea 0
  $0 = sc.exe config Winmgmt start= demand; sp HKLM:\SOFTWARE\Microsoft\Wbem 'Enable Costly Providers' 0 -type dword -force -ea 0
  $B = gwmi -Class __FilterToConsumerBinding -Namespace 'root\subscription' -Filter "Filter = ""__eventfilter.name='$N'""" -ea 0
  $C = gwmi -Class CommandLineEventConsumer -Namespace 'root\subscription' -Filter "Name='$N'" -ea 0
  $F = gwmi -Class __EventFilter -NameSpace 'root\subscription' -Filter "Name='$N'" -ea 0
  if ($B) { $B | rwmi; $off = $true } ; if ($C) { $C | rwmi; $off = $true } ; if ($F) { $F | rwmi; $off = $true }
  if ($off) { write-host -fore 0xf -back 0xd "`n $N [REMOVED] run again to install "; timeout /t 5; return }
  $P = "$([environment]::SystemDirectory)\cmd.exe"; $T = "$P /q $N (c) AveYo, 2021 /d /rerase appraiserres.dll /f /s /q"
  $D = "$($P[0]):\`$WINDOWS.~BT"; $Q = "SELECT SessionID from Win32_ProcessStartTrace WHERE ProcessName='vdsldr.exe'"
  $F = swmi -Class __EventFilter -NameSpace 'root\subscription' -args @{
    Name = $N; EventNameSpace = 'root\cimv2'; QueryLanguage = 'WQL'; Query = $Q} -PutType 2 -ea 0
  $C = swmi -Class CommandLineEventConsumer -Namespace 'root\subscription' -args @{
    Name = $N; WorkingDirectory = $D; ExecutablePath = $P; CommandLineTemplate = $T; Priority = 128} -PutType 2 -ea 0
  $B = swmi -Class __FilterToConsumerBinding -Namespace 'root\subscription' -args @{Filter=$F;Consumer=$C} -PutType 2 -ea 0
  write-host -fore 0xf -back 0x2 "`n $N [INSTALLED] run again to remove "; timeout /t 5
} ; start -verb runas powershell -args "-nop -c & {`n`n$($_Paste_in_Powershell-replace'"','\"')}"
$_Press_Enter
#::

WMI-based version above works great with most PC's, but as always there are outliers, so here's an alternative IFEO-based v2 which should be more compatible (it removes v1 to prevent redundancy)

Skip_TPM_Check_on_Dynamic_Update_v2.cmd

Code:


@(set "0=%~f0"^)#) & powershell -nop -c iex([io.file]::ReadAllText($env:0)) & exit/b
#:: double-click to run or just copy-paste into powershell - it's a standalone hybrid script
#:: v2 of the toggle script comes to the aid of outliers for whom v1 did not work due to various reasons (broken/blocked/slow wmi)
#:: uses IFEO instead to attach to the same Virtual Disk Service Loader process running during setup, then launches a cmd erase
#:: of appraiserres.dll - but it must also do some ping-pong renaming of the exe in system32\11 - great implementation nonetheless
#:: (for simplicity did not use powershell invoking CreateProcess and DebugActiveProcessStop to overcome IFEO constrains)
#:: in v2 the cmd window will briefly flash while running diskmgmt - so it is not "better" per-se. just more compatible / reactive
#:: you probably don't need to have it installed at all times - just when doing feature updates or manual setup within windows
#:: hence the on off toggle just by running the script again

$_Paste_in_Powershell = {
  $N = 'Skip TPM Check on Dynamic Update'
  $0 = sp 'HKLM:\SYSTEM\Setup\MoSetup' 'AllowUpgradesWithUnsupportedTPMOrCPU' 1 -type dword -force -ea 0
  $B = gwmi -Class __FilterToConsumerBinding -Namespace 'root\subscription' -Filter "Filter = ""__eventfilter.name='$N'""" -ea 0
  $C = gwmi -Class CommandLineEventConsumer -Namespace 'root\subscription' -Filter "Name='$N'" -ea 0
  $F = gwmi -Class __EventFilter -NameSpace 'root\subscription' -Filter "Name='$N'" -ea 0
  if ($B) { $B | rwmi } ; if ($C) { $C | rwmi } ; if ($F) { $F | rwmi }
  $C = "cmd /q $N (c) AveYo, 2021 /d/x/r>nul (erase /f/s/q %systemdrive%\`$windows.~bt\appraiserres.dll"
  $C+= '&md 11&cd 11&ren vd.exe vdsldr.exe&robocopy "../" "./" "vdsldr.exe"&ren vdsldr.exe vd.exe&start vd -Embedding)&rem;'
  $K = 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vdsldr.exe'
  if (test-path $K) {ri $K -force -ea 0; write-host -fore 0xf -back 0xd "`n $N [REMOVED] run again to install "; timeout /t 5}
  else {$0=ni $K; sp $K Debugger $C -force; write-host -fore 0xf -back 0x2 "`n $N [INSTALLED] run again to remove ";timeout /t 5}
} ; start -verb runas powershell -args "-nop -c & {`n`n$($_Paste_in_Powershell-replace'"','\"')}"
$_Press_Enter
#::

Click to expand...

Can this trick apply to Windows Server 2022?

AveYo · Oct 5, 2021

@amoahfrank2013 - did you really needed to quote the whole freaking post to ask that question? no, and it does not apply to server 2022 (what exactly is the trouble you're facing with server 2022?)

amoahfrank2013 · Oct 5, 2021

BAU said: ↑

@amoahfrank2013 - did you really needed to quote the whole freaking post to ask that question? no, and it does not apply to server 2022 (what exactly is the trouble you're facing with server 2022?)
Click to expand...

Sorry for that long stunt of quote lol. I was about installing server 2022, and thought it would also check for compatibility (tpm2.0 etc)...

Mercy34 · Oct 5, 2021

Does this method only skip TPM check or CPU check too? I have a i5 4590

AveYo · Oct 5, 2021

it skips all checks

Mercy34 · Oct 5, 2021

You need to login to view this posts content.

AveYo · Oct 5, 2021

Mercy34 said: ↑

What should I do if I want to fresh install from a USB?. I copy Skip_TPM_Check_on_Media_Boot.cmd to usb. Shift+F10 I:/Skip_TPM_Check_on_Media_Boot its running for a while then I got this error. When I try to install it still say this pc not meet the requirement.
Click to expand...

Copy that script on the usb stick you've made and run it under windows, before booting from it. Then it should be applied automatically and you don't need to do anything else

Or copy the simpler, manual "bypass.bat" script to the usb stick you've made, then run it after booting from it via shift+f10 then try entering C:\bypass or D:\bypass and etc. (it's probably I:\bypass for you)
it should start setup when found

If you create the iso / usb via MediaCreationTool.bat - the bypass is automatically included

Mercy34 · Oct 5, 2021

BAU said: ↑

Copy that script on the usb stick you've made and run it under windows, before booting from it. Then it should be applied automatically and you don't need to do anything else

Or copy the simpler, manual "bypass.bat" script to the usb stick you've made, then run it after booting from it via shift+f10 then try entering C:\bypass or D:\bypass and etc. (it's probably I:\bypass for you)
it should start setup when found

If you create the iso / usb via MediaCreationTool.bat - the bypass is automatically included
Click to expand...

Thank you very much. It worked. I made a mistake created the iso use microsoft media creation tool so no bypass included.

dany0071199661 · Oct 5, 2021

wintohdd installation no problem not need any TPM or other restriction

works on i5 7400 TPM2.0 in bios disabled

shot² · Oct 5, 2021

You need to login to view this posts content.

Dark Dinosaur · Oct 5, 2021

How it suppose to boot ..
After format it's like clean sheet
Are you sure what you say
I will test it today too ( first time heard )

nechrist · Oct 5, 2021

I've tried the Skip_TPM_Check_on_Media_Boot.cmd on the original iso, booted in a VM with unsupported configuration and it doesn't work. Manual bypass.cmd works great instead

JLBENEDICT · Oct 5, 2021

What is the purpose of deleting the "appraiserres.dll" file? ( is it necessary, as I was able to get Windows 11 installed to unsupported VM with only the registry modifications )

AveYo · Oct 5, 2021

@nechrist, maybe you've made the same mistake as @Mercy34 the first time? it worked for them in the end
@JLBENEDICT, the purpose is to make setup work within windows, for upgrades. registry modifications only work when booting from media

nechrist · Oct 5, 2021

@BAU nope, i've extracted the iso in a folder and run the script under windows, then recompiled the iso. This one https://forums.mydigitallife.net/threads/win-11-boot-and-upgrade-fix-kit-v2-0.83724/ works good instead. Same procedure.

bjf2000 · Oct 5, 2021

You need to login to view this posts content.

mabaega · Oct 6, 2021

Successfuly Clean Install Win11 on my PC,
@BAU Thanks for script...

Run Bypass.bat, got error on last Command.
Maybe it should not there...

Just thinking, Why we must Run setup exe?

Tiger-1 · Oct 6, 2021

You need to login to view this posts content.

Dynamic Windows 11 Setup TPM Bypass

shot² MDL Junior Member

Dark Dinosaur X Æ A-12

amoahfrank2013 MDL Novice

AveYo MDL Expert

amoahfrank2013 MDL Novice

Mercy34 MDL Novice

AveYo MDL Expert

Mercy34 MDL Novice

AveYo MDL Expert

Mercy34 MDL Novice

dany0071199661 MDL Member

shot² MDL Junior Member

Dark Dinosaur X Æ A-12

nechrist MDL Guide Pack

JLBENEDICT MDL Junior Member

AveYo MDL Expert

nechrist MDL Guide Pack

bjf2000 MDL Expert

mabaega MDL Senior Member

Tiger-1 MDL Guru