Bypassing TPM and SecureBoot requirements in NTLite Settings

[chrcol]

Yes, all of those are set if you enable TPM and Storage setup requirement disabling.
Read the description of those, basically enable boot.wim processing for Settings as well.

Also it should enable setup.exe method as well now, not just usb stick if that's what you aimed at.

Hi, sorry I dont easily get confused, but there is no TPM and storage setting, just TPM and secureboot setting.

Can you please confirm if TPM and secure boot setting does all of what you said, or do I also need registry files?

 

[garlin]

NTLite has two different settings for bypassing Setup requirements:

• Setup requirement - TPM and Secure Boot
  BypassRAMCheck = 1
  BypassTPMCheck = 1
  BypassSecureBootCheck = 1
  
  While multiple sources claim that more checks exist (like BypassStorageCheck), it has been proven as false. The reg values must be integrated into boot.wim, and have no effect on install.wim.
  
  Rufus does this by running commands from a hidden unattended file, as does Schneegan's autounattend.xml generator.
  
  
• Setup requirement - TPM and Secure Boot - Host
  AllowUpgradesWithUnsupportedTPMOrCPU = 1
  
  The reg values must be integrated into install.wim, and have no effect on boot.wim.

 

[garlin]

• Setup requirement - TPM and Secure Boot - Host
  AllowUpgradesWithUnsupportedTPMOrCPU = 1

Some users believe this setting isn't enough to bypass 24H2 upgrade restrictions, and apply this reg file on a live system:

Windows Registry Editor Version 5.00

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\CompatMarkers]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Shared]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\TargetVersionUpgradeExperienceIndicators]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\HwReqChk]
"HwReqChkVars"=hex(7):53,00,51,00,5f,00,53,00,65,00,63,00,75,00,72,00,65,00,42,\
  00,6f,00,6f,00,74,00,43,00,61,00,70,00,61,00,62,00,6c,00,65,00,3d,00,54,00,\
  52,00,55,00,45,00,00,00,53,00,51,00,5f,00,53,00,65,00,63,00,75,00,72,00,65,\
  00,42,00,6f,00,6f,00,74,00,45,00,6e,00,61,00,62,00,6c,00,65,00,64,00,3d,00,\
  54,00,52,00,55,00,45,00,00,00,53,00,51,00,5f,00,54,00,70,00,6d,00,56,00,65,\
  00,72,00,73,00,69,00,6f,00,6e,00,3d,00,32,00,00,00,53,00,51,00,5f,00,52,00,\
  61,00,6d,00,4d,00,42,00,3d,00,38,00,31,00,39,00,32,00,00,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\Setup\MoSetup]
"AllowUpgradesWithUnsupportedTPMOrCPU"=dword:00000001

The reason is Windows runs a daily scheduled task to populate the AppCompatFlags keys, and you can unblock the upgrade by removing all the bad markers. As the task runs every night, you apply the changes right before running Setup.exe.

 

[chrcol]

I think I will leave it as I set it then which was those 2 options on setup and install wim. I was able to install in the VM anyway.
I think my bigger task is making the 11 UI useable. I couldnt even find an option to show all sys tray icons all the time.