Общее - [решено] Обход TPM SecureBoot

[geepnozeex]

в boot.wim вносим твик



Код:

Код: Выделить всё

Dism /Mount-Wim /WimFile:C:\WORK\boot.wim /index:2 /MountDir:C:\WORK\Mount
Reg load HKLM\SSYSTEM C:\WORK\Mount\Windows\System32\Config\SYSTEM
FOR %%A IN (TPM SecureBoot) DO Reg Add HKLM\SSYSTEM\Setup\LabConfig /v Bypass%%ACheck /t REG_DWORD /d 1 /f
Reg unload HKLM\SSYSTEM
Dism /Unmount-Wim /MountDir:C:\WORK\Mount /commit

[Vadikan]

Альтернатива правке WIM:

Обход системных требований Windows 11 при чистой установке с помощью файла ответов

[geepnozeex]

Пример файла ответов с обходом TPM SecureBoot

[spoiler]

Код: Выделить всё

<?xml version="1.0" encoding="utf-8"?>
<unattend xmlns="urn:schemas-microsoft-com:unattend">
    <settings pass="windowsPE">
        <component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
            <SetupUILanguage>
                <UILanguage>ru-RU</UILanguage>
            </SetupUILanguage>
            <InputLocale>ru-RU</InputLocale>
            <SystemLocale>ru-RU</SystemLocale>
            <UILanguage>ru-RU</UILanguage>
            <UserLocale>ru-RU</UserLocale>
        </component>
        <component name="Microsoft-Windows-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
            <UserData>
              <ProductKey>
                  <Key></Key>
              </ProductKey>
                <AcceptEula>true</AcceptEula>
                <FullName>*</FullName>
            </UserData>
         <RunSynchronous>
            <RunSynchronousCommand wcm:action="add">
               <Order>1</Order>
               <Path>cmd /c for %a in (TPM SecureBoot) do reg add HKLM\SYSTEM\Setup\LabConfig /t REG_DWORD /v Bypass%aCheck /d 1 /f</Path>
            </RunSynchronousCommand>
         </RunSynchronous>
        </component>
    </settings>
    <settings pass="specialize">
        <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
            <ComputerName>*</ComputerName>
        </component>
    </settings>
    <settings pass="oobeSystem">
        <component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
            <InputLocale>ru-RU</InputLocale>
            <SystemLocale>ru-RU</SystemLocale>
            <UILanguage>ru-RU</UILanguage>
            <UserLocale>ru-RU</UserLocale>
        </component>
        <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
            <OOBE>
                <ProtectYourPC>3</ProtectYourPC>
                <HideEULAPage>true</HideEULAPage>
                <HideLocalAccountScreen>true</HideLocalAccountScreen>
                <HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>
                <NetworkLocation>Home</NetworkLocation>
            </OOBE>
            <TimeZone>Russian Standard Time</TimeZone>
            <UserAccounts>
                <LocalAccounts>
                    <LocalAccount wcm:action="add">                        
                        <Name>User</Name>
                        <Group>Administrators</Group> 
                        <Password>
                            <Value></Value>                            
                        </Password>                       
                    </LocalAccount>
                </LocalAccounts>
            </UserAccounts>
    <FirstLogonCommands>
        <SynchronousCommand wcm:action="add">
            <Order>1</Order>
            <CommandLine>cmd /c net accounts /MaxPWAge:Unlimited</CommandLine>
        </SynchronousCommand>
    </FirstLogonCommands> 
        </component>
    </settings>   
</unattend>

[/spoiler]