Windows 11

crypticus

Well-Known Member
  • Windows 11 has some requirements. Some of them are TPM & SecureBoot
  • TPM (Trusted Platform Module) is a computer chip (microcontroller) that can securely store artifacts used to authenticate the platform (your PC or laptop).
  • Almost every CPU in the last 5-7 years has a TPM. For Intel its called the "Intel PTT" for AMD it would be "AMD PSP fTPM". TPMs have been required for OEM certification since at least 2015 and was announced in 2013.
  • You can see the list for microsoft's minimum requirements for Windows 11 from the links below.
  • Secure Boot is one feature of the latest Unified Extensible Firmware Interface (UEFI). The feature defines an entirely new interface between operating system and firmware/BIOS.
  • When enabled and fully configured, Secure Boot helps a computer resist attacks and infection from malware. Secure Boot detects tampering with boot loaders, key operating system files, and unauthorized option ROMs by validating their digital signatures. Detections are blocked from running before they can attack or infect the system.



Tools To Check Minimum Requirements:
Github Fellow: WhyNotWin11 (Recommended Since Its Detailed)
Microsoft: PCHealthCheckApp
Supported CPU's List AMD - INTEL - QUALCOMM

TPM, SecureBoot, Ram, Storage, CPU Bypass:
1)
Use NTLite's Option To Bypass, Don't Forget To Apply Changes To Boot.wim (Recommended Method)
2) Use This Regedit Entry or Automated Script I Made: Go
Windows Registry Editor Version 5.00

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\CompatMarkers]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Shared]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\TargetVersionUpgradeExperienceIndicators]

[HKEY_LOCAL_MACHINE\SYSTEM\Setup\LabConfig]
"BypassSecureBootCheck"=dword:00000001
"BypassTPMCheck"=dword:00000001
"BypassCPUCheck"=dword:00000001
"BypassRAMCheck"=dword:00000001
"BypassStorageCheck"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\Setup\MoSetup]
"AllowUpgradesWithUnsupportedTPMOrCPU"=dword:00000001

[HKEY_CURRENT_USER\Control Panel\UnsupportedHardwareNotificationCache]
"SV1"=dword:00000000
"SV2"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE]
"BypassNRO"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\HwReqChk]
"HwReqChkVars"=hex(7):53,00,51,00,5f,00,53,00,65,00,63,00,75,00,72,00,65,00,42,\
00,6f,00,6f,00,74,00,43,00,61,00,70,00,61,00,62,00,6c,00,65,00,3d,00,54,00,\
52,00,55,00,45,00,00,00,53,00,51,00,5f,00,53,00,65,00,63,00,75,00,72,00,65,\
00,42,00,6f,00,6f,00,74,00,45,00,6e,00,61,00,62,00,6c,00,65,00,64,00,3d,00,\
54,00,52,00,55,00,45,00,00,00,53,00,51,00,5f,00,54,00,70,00,6d,00,56,00,65,\
00,72,00,73,00,69,00,6f,00,6e,00,3d,00,32,00,00,00,53,00,51,00,5f,00,52,00,\
61,00,6d,00,4d,00,42,00,3d,00,38,00,31,00,39,00,32,00,00,00,00,00
3) Use This AutoUnattend.xml File: Go
4) Use This Script for fresh install.
5) Use This Script for upgrade.
6) Use This DLL Trick Replace "appraiserres.dll" from Windows 10 ISO to bypass. (Doesn't Work Anymore)
If you apply these fixes to live machine you can upgrade, if you apply to install.wim & boot.wim you can fresh install.
I recommend method 1 or 2 or 3. They all do the same thing in different ways.


Creating Offline Account And Disabling Internet Access Requirement During Setup
1)
Use Unattended Answer File Created By For Example NTLite
2) Use This Command By Shift+F10 On OOBE Part (OOBE\BYPASSNRO) (Be Offline)
3) Use This Method By Shift+F10 On OOBE Part Method (Do control netconnections at account creation - disable network - go back) (Be Offline)
4) Use This Command By Shift+F10 (taskkill /F /IM oobenetworkconnectionflow.exe) (Doesn't Work Anymore)
5) Alt+F4 At Wifi Configuration Part (Doesn't Work Anymore)
I recommend method 1 or 2 or 3. Make offline installations.



How to get ISO
1) Media Creation Tool From Microsoft: https://www.microsoft.com/en-us/software-download/windows11
2) Media Creation Tool From AveYo: https://gist.github.com/AveYo/c74dc774a8fb81a332b5d65613187b15
3) UUP Dump: https://uupdump.net/
4) Fido: https://github.com/pbatard/Fido
5) TechBench Alternatives: 1 - 2
6) Heidoc: https://www.heidoc.net/joomla/technology-science/microsoft/67-microsoft-windows-iso-download-tool

To get insider builds you can use UUP Dump OR on a live machine you can use abbodi's offlineinsiderenroll script:
https://github.com/abbodi1406/offlineinsiderenroll (Use Local Account)




Guide
1)
Subsystem & Sideloading APK: Go

Some Tweaks
1) Reg Trick: New Microsoft Office UI: Go
2) Reg Trick: Disable Chat/Teams&Widgets: Go
3) Reg Trick: DeProvision Registry To Disable Reinstalls: Go

Some Tools
1) Microsoft Tools (Attached)
2) Custom Context Menu: Go
3) Better Photo Viewer: Go
4) Better Media Player: Go
5) Store App Downloader&Installer: Go
6) LanguagePack Downloader: Go

Feature Control Tools (May not work)
1) StagingTool: Go
2) mach2: Go
3) ViVeTool: Go

4) ViveToolGUI: Go
 

Attachments

Last edited:
i rarely use a start menu on any os and i dont mind metro on 8.1 and 10. actually on w10 1809 my tweaks cripple the start menu completely and i didnt miss it.
 
Last edited:
angelaasch, see with ege914 about how to get the DLL, all I can do is provide the means to make it more streamlined to edit images.
What you do with that is up to you. One of my principles with NTLite is not to edit any DLLs, especially distribute something that I haven't compiled or have a (free) license to do so.
So far NTLite is not hacking/editing a single library file in Windows, operations consist only of normal (complete) file operations.
File is either there or not, version a or b, there are no custom steps which can have undesirable effects or make the paranoid nervous.
 
nuhi do you know if windows 11 wants secure boot enabled? or just needs secure boot capable devices?

if wants it enabled, are we going to be able to boot our custom windows?
 
according to a post at techpowerup you "delete "appraiserres.dll" from your installation source and it will get rid of the check." nuhi ;)
read post no 47 if we are talking about file replacement. ;) :cool:
wait for the official release to come out, give it 6 months and all its little bug bears will be known then it will be usable.
 
Last edited:
angelaasch and Clanger, sure, if only deleting a file does it, I'm up for a separate component if it works.
Btw appraiserres is already removed with Manual Setup component, so feel free to test yourself, just make sure to boot the image, not run setup.exe from another Windows as the support would be removed.
If confirmed, will split that file if setup.exe works without it.

ege914, this is basically what I know about the requirements, it also links to an earlier article.
This is not even a released version, so we'll see where it goes. I test it just on a VM for now, had UEFI and secureboot enabled, as always in my Live/Deployed tests.
As for secure boot in general, NTLite is not editing any files so it doesn't have anything to complain about.
Secure boot is about installed/boot drivers and signatures, all intact. Also most importantly it's not a new feature, just might become mandatory.
 
nuhi with the chip shortages ms might change the tpm requirement. not being able to install w11 will be welcomed by a lot of people. im interested to see what services can be disabled along with cortana search apps defender etc.
 
Last edited:
according to a post at techpowerup you "delete "appraiserres.dll" from your installation source and it will get rid of the check." nuhi ;)
read post no 47 if we are talking about file replacement. ;) :cool:
wait for the official release to come out, give it 6 months and all its little bug bears will be known then it will be usable.

actually i always remove everything inside sources folder except wim files :D and it always worked...
 
I got rid of the check but now i get the message "this pc can't ́run windows 11" but i´m absolutely shure that i fulfill the systemrequirements. Any idea how to get rid of this message? My motherboard doesn´t have TPM and UEFI but Windows 10 is running very well since many years.
Almost every CPU in the last 5-7 years has a TPM. For Intel its called the "Intel PTT" for AMD it would be "AMD PSP fTPM". TPMs have been required for OEM certification since at least 2015 and was announced in 2013

It seems that removing or replacing "appraiserres.dll" from Win10 ISO would bypass the check for windows 11 min requirements.
 
Last edited:
You may test it with leaked iso, or you can wait for final release to test it out. i or anyone else can't be sure since we don't have lots of different hardware to test everything.
 
another thing that needs looking into is the mandatory internet connection for setup for W11 Home edition.
what files will be downloaded and can they be added from a local source instead?
im sure the EU will have something to say about that and the forced ms account too.
Added ways to pass online account thanks for reminding. I think you can't use widgets with local account? IDK, I will possibly remove it via NTLite anyways...
 
Back
Top