Windows 11: how to bypass TPM checks during dynamic updates

Martin Brinkmann
Feb 12, 2022
Windows 11 Help
|
36

Windows 11 users who have installed Microsoft's operating system on devices that don't meet the minimum system requirements may have run into troubles installing recent updates. Updates may fail to install on these devices and users may be puzzled as to why that is happening.

windows 11 skip tpm check updates

Microsoft did announce previously that it would not guarantee that any kind of updates would install on devices that would not meet Windows 11's minimum system requirements. It appears that some updates check for requirements, and if these are not met, won't install on devices.

Windows users who want to install Windows 11 on devices that don't meet the system requirements can do so easily. While Microsoft did publish a warning stating that users were on their own if they did so, it did release instructions for installing Windows 11 on incompatible devices.

ADVERTISEMENT

Third-party tools like MediaCreationTool.batVentoy, or Rufus can also be used to upgrade incompatible devices or install Windows 11 from scratch on these devices.

Not all updates may fail, but users who run into the issue may wonder what they can do about it. Is there a way to bypass the minimum requirements again to get the failing updates to install? Yes, indeed there is.

Here is what you need to do:

  1. Open the GitHub project website of the MediaCreationTool.bat utility.
  2. Select Code > Download ZIP.
  3. Extract the ZIP on the target system.
  4. Open the folder bypass11.
  5. Right-click on Skip_TPM_Check_on_Dynamic_Update.cmd and select run as administrator.
    1. If "Windows protected your PC" is displayed, select More info > Run anyway.
  6. Confirm the UAC prompt that is displayed.

A command prompt window opens that confirms that the bypass has been installed on the system. You may run the script again at any time to remove the bypass again from the system.

A comment at the top of the file reveals that it uses a /Product Server trick for the bypass.

v7 dynamically skips the anti-consumer windows 11 setup checks via /Product Server trick
it is most reliable, and only has a 'Windows Server' label cosmetic-ish difference

It is advised to create a backup of the system before you make any change to it, including this one. You may load the cmd file in a plain text editor to look at the code and make sure that it is legitimate.

Closing Words

Microsoft's overall strategy in regards to incompatible systems is quite puzzling to many users. The company did publish instructions, with a scary sounding disclaimer, on installing Windows 11 on incompatible systems. Users who did upgrade their devices using the instructions or installed Windows 11 anew may now run into these roadblocks.

Microsoft did make it clear that these installations were not supported and that updates might not be delivered to these devices, but is there really a technical reason for the failure or did Microsoft add these checks on purpose?

Now You: what is your take on this? (via Semper Video)

Summary
Windows 11: how to bypass TPM checks during dynamic updates
Article Name
Windows 11: how to bypass TPM checks during dynamic updates
Description
Find out how to install updates on Windows 11 devices that do not meet the minimum system requirements.
Author
Publisher
Ghacks Technology News
Logo
Advertisement

Previous Post: «
Next Post: «

Comments

  1. Rick said on February 12, 2022 at 6:13 pm
    Reply

    Has anyone seen an update fail (for the above reason) on a system installed using MS’s own Registry workaround? That’s not something that I’ve heard about yet, so for now I’m assuming the article is just a precautionary measure against a possible future.

    1. Giorgau said on February 12, 2022 at 9:35 pm
      Reply

      Rick, yes it started happening a while ago
      machines on 11 Insider Preview could no longer update to the latest.
      Windows Update would go on a loop and fail, after restart was still previous version.

      MS’s registry workaround only works for TPM 1.2 devices.
      For older series without any TPM, SecureBoot / VMs with less RAM – it does not help.

      1. Don John said on February 13, 2022 at 12:41 am
        Reply

        @Giorgau we are talking about Stable, not preview… that was the point of the question.
        I installed win11 and I haven’t had problems installing latest, and then, I can disable windows updates with my firewall easily so I barely care if updates install tomorrow or next week.

        Maybe feature updates will have problems, but normal updates no and until STABLE builds don’t get a new Windows 11 feature build, there is no way to think this problems will happen, and then, it will be just easy to upgrade to new versions with MediaCreationTool.bat.

        So I don’t understand the reason of this post and the reason of your reply when it is obvious Previews have a different way of being released than Stable ones.

      2. Giorgau said on February 14, 2022 at 12:40 am
        Reply

        @Don John, neither Rick, nor Martin specifically talked about Stable.

        The topic is dynamic updates – and that includes upgrades while on windows from refreshed media, or new Insider builds appearing on windows update.

        Microsoft broke simpler workarounds several times, for both refreshed media and windows update. You had to tinker with setup files and stuff.

        Since December I stopped worrying about it, as the updated script mentioned in the topic has been working flawlessly and Insider builds auto-update just like Stable.

        Still, it’s something to keep in mind.
        At any time Microsoft could artificially hinder updates for Stable, too.

      3. Frankel said on February 19, 2022 at 11:59 am
        Reply

        I will never understand the masochism to run Windows 11, when it is merely a “theme pack” compared to safe and supported Windows 10.

        But people always think the grass is greener on the other side. FOMO = fear of missing out. Every time i read a Win 11 article I am glad I am missing out this self-flagellation.

        Before the need for me ever arises these “early adopters” will have suffered in my place and I can safely decide if I want this nonsense. When will the article come that new ISOs won’t even install anymore without a windows account?

        Yes you’ve read right:
        https://arstechnica.com/gadgets/2022/02/new-preview-build-adds-microsoft-account-requirement-to-windows-11-pro/

        When it is 2025 and I have to make the decision to switch, I hopefully will either see this BS stopped and Windows 11 can be de-spyed just like Windows 10. Or I make the switch to *NIX.

    2. Keith Watt said on February 25, 2022 at 9:38 am
      Reply

      Your CPU will need to be up to date. My computer is TPM 2.0 but CPU is AMD 8 A and therefore not compatible for Windows 11.

      I think Microsoft is going to start dictating what type of computer, tablet or phone you will have to buy to use their windows os.

  2. seeprime said on February 12, 2022 at 7:04 pm
    Reply

    It seriously makes no sense that Microsoft would actually block updates at all, where Windows 11 is already installed. That screams of management psychopathy at MSFT. A simple disclaimer that the OS might not run well should be adequate.

  3. Anonymous said on February 12, 2022 at 7:53 pm
    Reply

    Its not worth it, Windows 11 is a POS. If you like unfunctional OS, go right ahead, but if your smart, stay on previous version of Windows.

  4. ilev said on February 12, 2022 at 8:02 pm
    Reply

    Microsoft has every right to block updates on none compliant Windows 11 PCs.
    The OS belong to Microsoft to do with whatever it pleases.

    1. Howard Mark said on February 12, 2022 at 10:34 pm
      Reply

      Then, tell me how i use Adobe CC properly in Linux. I don’t want to use Adobe alternatives as they are not as good as Adobe. I wait.

      1. aaa said on February 13, 2022 at 11:02 am
        Reply

        Buy a new machine with TPM 2.0

        Simple as that.

      2. Corky said on February 14, 2022 at 7:53 pm
        Reply

        @aaa : That’s such a flawed statement i feel it shouldn’t need pointing out, but i guess it does.

        Firstly the amount of E-waste that would generate would be enough to sink a battleship. Going on MS’ own stats there’s roughly 1.3 billion windows 10 machines out there so even if we’re being generous by saying 50% of those are capable of running W11 that’s still 650 million computers heading for the land fill.

        Second is the cost. Sure you maybe able to afford a new computer but millions of others simply can’t, some peoples only link to the outside world in third-world countries maybe an ancient Athlon 64 that was donated to them so buying a new machine simply isn’t an option.

        Is it really a good idea to leave those machines unpatched simply because MS want to apparently make Windows more secure (by having millions of unpatched Windows machines in the world).

    2. Nordberg said on February 12, 2022 at 10:43 pm
      Reply

      True. But I also have the right to mess with the OS as i please. Not one bit worried about updates not installing since they fix absolutely nothing, ever. This is still Alpha software. So much easier to just butcher the OS so it has a very hard time calling home and maybe once every 18 months grab a new iso and reinstall.

    3. U-Turn said on February 12, 2022 at 10:47 pm
      Reply

      That’s Microsoft for you in this era. Ridiculous upgrade with useless TPM and Secure Boot mandate to prevent dual boot with Linux. User feedback apps/website only for cosmetically as stakeholders will be happy with this feature.

    4. Anonymous said on February 13, 2022 at 6:06 am
      Reply

      but the device and user files belong to the user. what right does microsoft have to force upgrade people pc to win 10 and deleting their programs & files in the process. so does their borky updates, what right they have to push their updates like that.

      i couldnt give a crap about them blocking updates, especially if the updates are always shit. where my right to block the updates, none!. only a mere delaying.

      1. Crazy Dude said on February 13, 2022 at 3:11 pm
        Reply

        This is about unsupported PCs that used a workaround to upgrade. Microsoft sets its requirements, and a disclaimer than unsupported PCs might not work correctly.

        Also, you should always make a backup of your files, there is no perfect software and issues can happen. Not only Microsft deployes bad updates. Even other paid OS have bad updates.

      2. Anonymous said on February 14, 2022 at 2:01 pm
        Reply

        yeah i know, deliberately i would say, like apple and their purposely slowing down old device update. still doesnt give them any “rights” to do that. backup may not be up to date even if it only by 1 week, not to mention how crucial is the file to someone/small or large business. its digital era now, someone livelihood depend on those. do you ever wonder why there is still device that use windows xp in this world? not to deal with these, dealing with virus/malware are so much easier than microsoft.

  5. Farmers said on February 12, 2022 at 10:39 pm
    Reply

    It seems to me that it’s only a matter of time before MS release an update that is so tied to the hardware requirements they’ve spoken of, that forcing install of it on incompatible hardware would cause serious issues. Will users then blame them, and say they’re deliberately crippling said machines, rather than recognising that they’re simply relying on features that hardware doesn’t have?

    1. Mark said on February 14, 2022 at 10:29 pm
      Reply

      @Farmers,
      MSFT could also fry and destroy our hardware. That’s a given, they will do it when the “right” time comes with no legal issues in w11, so they will keep getting money their cut from hardware vendors.
      But this has nothing to do with icompatible hardware, they will do it because of their corporate deals. MSFT is more hungry for money than ever, they need more and more billions of dollars to keep buying and buying everything out there and turn into a bigger corporate monster than they already are.
      Out of all big tech corporations, MSFT is the most aggressive of all, just have a look out how many acquisitions they have done the last years in comparison with the other big tech.
      Avoiding MSFT updates when you can is a blessing.

  6. nagyern said on February 12, 2022 at 11:28 pm
    Reply

    Hi Martin Brinkmann

    How can I contact you?

    1. Martin Brinkmann said on February 13, 2022 at 6:36 am
      Reply
    2. Erfan Siavoshy said on February 13, 2022 at 8:54 am
      Reply

      Thanks for your short article which helps a lot (keeping it short is what I like)
      And comments from other people show that this website is a professional place for pro users to discuss.

      But the unanswered question here is that blocking updates happen to Stable Builds or Preview Builds (Insider channel)?

      If it just happens to Preview Builds so the solution is very easier: stay on Stable releases.

      Please answer this important question dear Martin Brinkmann.

      1. Giorgau said on February 14, 2022 at 12:50 am
        Reply

        At the moment, only Insider builds cannot auto-upgrade from windows update.
        Let’s say you’ve been on Insider from early on when there were no blocks.
        Or you’ve used OfflineInsiderEnroll.
        But the script presented fixes that.

        You could say that it’s pretty much guaranteed to happen on Stable as well
        with the next Feature Update later this year
        (since Insider builds updates are treated like feature updates).

        Unlike Feature Updates, normal monthly security updates are fine and won’t be blocked.

  7. zero2dash said on February 13, 2022 at 3:01 am
    Reply

    More reason to not run this dumpster fire of an OS.

  8. John G. said on February 13, 2022 at 9:47 am
    Reply

    People with machines that don’t have the enough requirements… they still don’t know how much blessed they are. W10 is still a superb and an amazing OS, probably till 2025 or even beyond. :|

  9. pHROZEN gHOST said on February 13, 2022 at 2:19 pm
    Reply

    This whole compatibility issue is all about money. MS has contracts with hardware vendors to generate new sales by making perfectly good current hardware obsolete WITH THEIR OS. The secret is to get off the Microsoft path and migrate to Linux. Yes, there is a bit of a learning curve. But, it is nothing compared to the issues that MS has with each and every new OS.

  10. Bortzum said on February 13, 2022 at 6:02 pm
    Reply

    Hey Microsoft, don’t want people installing your ridiculously crappy operating system? Don’t publish any Windows 11 .iso anywhere, ever. In fact, block the ability to clean install Windows 11 offline too. If someone manages to do it anyway, block every program from running. Be the almighty ruler of the universe you want to be. Become God. Proudly be the donkeyhole we all know you are. Only allow online upgrades where you control everything, as you so clearly desire. There, I fixed it for ya. Now F**K OFF you horrible display of human greed. Despicable lowlife company.

  11. Kindkiwi said on February 13, 2022 at 7:25 pm
    Reply

    I have said this before but the world has a major chip shortage & throwing away hardware because Microsoft says so is not good thinking.
    Interesting my custom Asus desktop is about 7 years old it has a TPM pin socket for the chip which you can buy. but the processor is not compliant .No matter what you do you cant make it Windows 11 ready.As its being said this is about money and investors ,not about security.

  12. ULBoom said on February 13, 2022 at 7:54 pm
    Reply

    I still don’t have the faintest idea what Win 11 is beside prettier. At some point Win 11 will be opened to anyone. Why isn’t Win 10 banned from updates on Win 11’s naughty hardware list?

    Some internal war going in in MS, none of the Win 11 debacle makes a lick of sense.

  13. Eleventeen said on February 13, 2022 at 9:25 pm
    Reply

    I have installed Windows 11 64-Bit on a laptop from 2005, with a 60GB SSD, 2GB RAM, no TPM and a 100% certainly incompatible processor. NONE of the requirements were met. NONE. Zero. I used Rufus to get rid of the requirement checks while creating the bootable .iso I downloaded from tb-rg.adguard and a Windows 7 OEM license I had on a sticker on the bottom of a dead laptop. Activated fine. All drivers found right away. Zero issues, zero problems, zero worries. This was in october 2021, and every cumulative update has installed flawlessly since then. This was the oldest laptop I have used, I have also done the same thing on several other laptops from 2007 to 2012, none of them have TPM or compatible processors, but Windows 11 runs even better than Windows 10 ever did on ALL of them. The requirements are a SCAM, A LIE. Install Windows 11, it runs on anything, and they will never block any updates. They lie. That’s what Microsoft is all about: lying. Lying and advertising.

    1. Brent R Jones said on February 14, 2022 at 2:37 pm
      Reply

      Wow! Good to know. I’ve got some old ones to try Win 11 on. Any special SW tools you used?

      1. Eleventeen said on February 15, 2022 at 3:19 am
        Reply

        https://images2.imgbox.com/17/e2/S75pymPZ_o.png

        Since written explanation seems to be too difficult…

  14. Anonymous said on February 13, 2022 at 11:43 pm
    Reply

    I will not buy a new computer every time MS comes out with a new OS. I got a new very fast OS from UK ready to go.

  15. Brent R Jones said on February 14, 2022 at 2:34 pm
    Reply

    Thanks, Martin. Your advice is so helpful. I always like to read your stuff.
    Brent R Jones

  16. Saad said on February 15, 2022 at 3:49 pm
    Reply

    Kaspersky deleted it. It’s a virus!

    Event: Object deleted
    Component: Intrusion Prevention
    Result description: Deleted
    Type: Trojan
    Name: UDS:Trojan.Win32.Bsymem
    Threat level: High
    Object path: D:\Downloads\Compressed\MediaCreationTool.bat-main\bypass11
    Object name: Skip_TPM_Check_on_Dynamic_Update.cmd
    MD5: 8271804BB7346D057748BF82C5BB56CB

    1. Bonzo said on February 16, 2022 at 7:17 am
      Reply

      So, Kaspersky in 2022 is a joke. Good to know.

Leave a Reply

Check the box to consent to your data being stored in line with the guidelines set out in our privacy policy

We love comments and welcome thoughtful and civilized discussion. Rudeness and personal attacks will not be tolerated. Please stay on-topic.
Please note that your comment may not appear immediately after you post it.