Windows 11: how to bypass TPM checks during dynamic updates
Windows 11 users who have installed Microsoft's operating system on devices that don't meet the minimum system requirements may have run into troubles installing recent updates. Updates may fail to install on these devices and users may be puzzled as to why that is happening.
Microsoft did announce previously that it would not guarantee that any kind of updates would install on devices that would not meet Windows 11's minimum system requirements. It appears that some updates check for requirements, and if these are not met, won't install on devices.
Windows users who want to install Windows 11 on devices that don't meet the system requirements can do so easily. While Microsoft did publish a warning stating that users were on their own if they did so, it did release instructions for installing Windows 11 on incompatible devices.
Third-party tools like MediaCreationTool.bat, Ventoy, or Rufus can also be used to upgrade incompatible devices or install Windows 11 from scratch on these devices.
Not all updates may fail, but users who run into the issue may wonder what they can do about it. Is there a way to bypass the minimum requirements again to get the failing updates to install? Yes, indeed there is.
Here is what you need to do:
- Open the GitHub project website of the MediaCreationTool.bat utility.
- Select Code > Download ZIP.
- Extract the ZIP on the target system.
- Open the folder bypass11.
- Right-click on Skip_TPM_Check_on_Dynamic_Update.cmd and select run as administrator.
- If "Windows protected your PC" is displayed, select More info > Run anyway.
- Confirm the UAC prompt that is displayed.
A command prompt window opens that confirms that the bypass has been installed on the system. You may run the script again at any time to remove the bypass again from the system.
A comment at the top of the file reveals that it uses a /Product Server trick for the bypass.
v7 dynamically skips the anti-consumer windows 11 setup checks via /Product Server trick
it is most reliable, and only has a 'Windows Server' label cosmetic-ish difference
It is advised to create a backup of the system before you make any change to it, including this one. You may load the cmd file in a plain text editor to look at the code and make sure that it is legitimate.
Closing Words
Microsoft's overall strategy in regards to incompatible systems is quite puzzling to many users. The company did publish instructions, with a scary sounding disclaimer, on installing Windows 11 on incompatible systems. Users who did upgrade their devices using the instructions or installed Windows 11 anew may now run into these roadblocks.
Microsoft did make it clear that these installations were not supported and that updates might not be delivered to these devices, but is there really a technical reason for the failure or did Microsoft add these checks on purpose?
Now You: what is your take on this? (via Semper Video)
BETTER WAY: Delete appraiseres.dll from Windows 11 Setup ISO and reinstall. Simple!
Kaspersky deleted it. It’s a virus!
Event: Object deleted
Component: Intrusion Prevention
Result description: Deleted
Type: Trojan
Name: UDS:Trojan.Win32.Bsymem
Threat level: High
Object path: D:\Downloads\Compressed\MediaCreationTool.bat-main\bypass11
Object name: Skip_TPM_Check_on_Dynamic_Update.cmd
MD5: 8271804BB7346D057748BF82C5BB56CB
So, Kaspersky in 2022 is a joke. Good to know.
Thanks, Martin. Your advice is so helpful. I always like to read your stuff.
Brent R Jones
I will not buy a new computer every time MS comes out with a new OS. I got a new very fast OS from UK ready to go.
I have installed Windows 11 64-Bit on a laptop from 2005, with a 60GB SSD, 2GB RAM, no TPM and a 100% certainly incompatible processor. NONE of the requirements were met. NONE. Zero. I used Rufus to get rid of the requirement checks while creating the bootable .iso I downloaded from tb-rg.adguard and a Windows 7 OEM license I had on a sticker on the bottom of a dead laptop. Activated fine. All drivers found right away. Zero issues, zero problems, zero worries. This was in october 2021, and every cumulative update has installed flawlessly since then. This was the oldest laptop I have used, I have also done the same thing on several other laptops from 2007 to 2012, none of them have TPM or compatible processors, but Windows 11 runs even better than Windows 10 ever did on ALL of them. The requirements are a SCAM, A LIE. Install Windows 11, it runs on anything, and they will never block any updates. They lie. That’s what Microsoft is all about: lying. Lying and advertising.
Wow! Good to know. I’ve got some old ones to try Win 11 on. Any special SW tools you used?
https://images2.imgbox.com/17/e2/S75pymPZ_o.png
Since written explanation seems to be too difficult…
I still don’t have the faintest idea what Win 11 is beside prettier. At some point Win 11 will be opened to anyone. Why isn’t Win 10 banned from updates on Win 11’s naughty hardware list?
Some internal war going in in MS, none of the Win 11 debacle makes a lick of sense.
I have said this before but the world has a major chip shortage & throwing away hardware because Microsoft says so is not good thinking.
Interesting my custom Asus desktop is about 7 years old it has a TPM pin socket for the chip which you can buy. but the processor is not compliant .No matter what you do you cant make it Windows 11 ready.As its being said this is about money and investors ,not about security.
Hey Microsoft, don’t want people installing your ridiculously crappy operating system? Don’t publish any Windows 11 .iso anywhere, ever. In fact, block the ability to clean install Windows 11 offline too. If someone manages to do it anyway, block every program from running. Be the almighty ruler of the universe you want to be. Become God. Proudly be the donkeyhole we all know you are. Only allow online upgrades where you control everything, as you so clearly desire. There, I fixed it for ya. Now F**K OFF you horrible display of human greed. Despicable lowlife company.
This whole compatibility issue is all about money. MS has contracts with hardware vendors to generate new sales by making perfectly good current hardware obsolete WITH THEIR OS. The secret is to get off the Microsoft path and migrate to Linux. Yes, there is a bit of a learning curve. But, it is nothing compared to the issues that MS has with each and every new OS.
People with machines that don’t have the enough requirements… they still don’t know how much blessed they are. W10 is still a superb and an amazing OS, probably till 2025 or even beyond. :|
More reason to not run this dumpster fire of an OS.
Hi Martin Brinkmann
How can I contact you?
Thanks for your short article which helps a lot (keeping it short is what I like)
And comments from other people show that this website is a professional place for pro users to discuss.
But the unanswered question here is that blocking updates happen to Stable Builds or Preview Builds (Insider channel)?
If it just happens to Preview Builds so the solution is very easier: stay on Stable releases.
Please answer this important question dear Martin Brinkmann.
At the moment, only Insider builds cannot auto-upgrade from windows update.
Let’s say you’ve been on Insider from early on when there were no blocks.
Or you’ve used OfflineInsiderEnroll.
But the script presented fixes that.
You could say that it’s pretty much guaranteed to happen on Stable as well
with the next Feature Update later this year
(since Insider builds updates are treated like feature updates).
Unlike Feature Updates, normal monthly security updates are fine and won’t be blocked.
https://www.ghacks.net/about-us/
It seems to me that it’s only a matter of time before MS release an update that is so tied to the hardware requirements they’ve spoken of, that forcing install of it on incompatible hardware would cause serious issues. Will users then blame them, and say they’re deliberately crippling said machines, rather than recognising that they’re simply relying on features that hardware doesn’t have?
@Farmers,
MSFT could also fry and destroy our hardware. That’s a given, they will do it when the “right” time comes with no legal issues in w11, so they will keep getting money their cut from hardware vendors.
But this has nothing to do with icompatible hardware, they will do it because of their corporate deals. MSFT is more hungry for money than ever, they need more and more billions of dollars to keep buying and buying everything out there and turn into a bigger corporate monster than they already are.
Out of all big tech corporations, MSFT is the most aggressive of all, just have a look out how many acquisitions they have done the last years in comparison with the other big tech.
Avoiding MSFT updates when you can is a blessing.
Microsoft has every right to block updates on none compliant Windows 11 PCs.
The OS belong to Microsoft to do with whatever it pleases.
but the device and user files belong to the user. what right does microsoft have to force upgrade people pc to win 10 and deleting their programs & files in the process. so does their borky updates, what right they have to push their updates like that.
i couldnt give a crap about them blocking updates, especially if the updates are always shit. where my right to block the updates, none!. only a mere delaying.
This is about unsupported PCs that used a workaround to upgrade. Microsoft sets its requirements, and a disclaimer than unsupported PCs might not work correctly.
Also, you should always make a backup of your files, there is no perfect software and issues can happen. Not only Microsft deployes bad updates. Even other paid OS have bad updates.
yeah i know, deliberately i would say, like apple and their purposely slowing down old device update. still doesnt give them any “rights” to do that. backup may not be up to date even if it only by 1 week, not to mention how crucial is the file to someone/small or large business. its digital era now, someone livelihood depend on those. do you ever wonder why there is still device that use windows xp in this world? not to deal with these, dealing with virus/malware are so much easier than microsoft.
That’s Microsoft for you in this era. Ridiculous upgrade with useless TPM and Secure Boot mandate to prevent dual boot with Linux. User feedback apps/website only for cosmetically as stakeholders will be happy with this feature.
True. But I also have the right to mess with the OS as i please. Not one bit worried about updates not installing since they fix absolutely nothing, ever. This is still Alpha software. So much easier to just butcher the OS so it has a very hard time calling home and maybe once every 18 months grab a new iso and reinstall.
Then, tell me how i use Adobe CC properly in Linux. I don’t want to use Adobe alternatives as they are not as good as Adobe. I wait.
Buy a new machine with TPM 2.0
Simple as that.
@aaa : That’s such a flawed statement i feel it shouldn’t need pointing out, but i guess it does.
Firstly the amount of E-waste that would generate would be enough to sink a battleship. Going on MS’ own stats there’s roughly 1.3 billion windows 10 machines out there so even if we’re being generous by saying 50% of those are capable of running W11 that’s still 650 million computers heading for the land fill.
Second is the cost. Sure you maybe able to afford a new computer but millions of others simply can’t, some peoples only link to the outside world in third-world countries maybe an ancient Athlon 64 that was donated to them so buying a new machine simply isn’t an option.
Is it really a good idea to leave those machines unpatched simply because MS want to apparently make Windows more secure (by having millions of unpatched Windows machines in the world).
Its not worth it, Windows 11 is a POS. If you like unfunctional OS, go right ahead, but if your smart, stay on previous version of Windows.
It seriously makes no sense that Microsoft would actually block updates at all, where Windows 11 is already installed. That screams of management psychopathy at MSFT. A simple disclaimer that the OS might not run well should be adequate.
Has anyone seen an update fail (for the above reason) on a system installed using MS’s own Registry workaround? That’s not something that I’ve heard about yet, so for now I’m assuming the article is just a precautionary measure against a possible future.
Your CPU will need to be up to date. My computer is TPM 2.0 but CPU is AMD 8 A and therefore not compatible for Windows 11.
I think Microsoft is going to start dictating what type of computer, tablet or phone you will have to buy to use their windows os.
Rick, yes it started happening a while ago
machines on 11 Insider Preview could no longer update to the latest.
Windows Update would go on a loop and fail, after restart was still previous version.
MS’s registry workaround only works for TPM 1.2 devices.
For older series without any TPM, SecureBoot / VMs with less RAM – it does not help.
I will never understand the masochism to run Windows 11, when it is merely a “theme pack” compared to safe and supported Windows 10.
But people always think the grass is greener on the other side. FOMO = fear of missing out. Every time i read a Win 11 article I am glad I am missing out this self-flagellation.
Before the need for me ever arises these “early adopters” will have suffered in my place and I can safely decide if I want this nonsense. When will the article come that new ISOs won’t even install anymore without a windows account?
Yes you’ve read right:
https://arstechnica.com/gadgets/2022/02/new-preview-build-adds-microsoft-account-requirement-to-windows-11-pro/
When it is 2025 and I have to make the decision to switch, I hopefully will either see this BS stopped and Windows 11 can be de-spyed just like Windows 10. Or I make the switch to *NIX.
@Giorgau we are talking about Stable, not preview… that was the point of the question.
I installed win11 and I haven’t had problems installing latest, and then, I can disable windows updates with my firewall easily so I barely care if updates install tomorrow or next week.
Maybe feature updates will have problems, but normal updates no and until STABLE builds don’t get a new Windows 11 feature build, there is no way to think this problems will happen, and then, it will be just easy to upgrade to new versions with MediaCreationTool.bat.
So I don’t understand the reason of this post and the reason of your reply when it is obvious Previews have a different way of being released than Stable ones.
@Don John, neither Rick, nor Martin specifically talked about Stable.
The topic is dynamic updates – and that includes upgrades while on windows from refreshed media, or new Insider builds appearing on windows update.
Microsoft broke simpler workarounds several times, for both refreshed media and windows update. You had to tinker with setup files and stuff.
Since December I stopped worrying about it, as the updated script mentioned in the topic has been working flawlessly and Insider builds auto-update just like Stable.
Still, it’s something to keep in mind.
At any time Microsoft could artificially hinder updates for Stable, too.