Win11绕过硬件限制（TPM和CPU验证）安装或升级24H2

问题现象
Windows 11 24H2
安装/升级推荐方案
微软官网下载：Windows 11 安装助手
下载跳过TPM验证的脚本并管理员权限运行
下载脚本开启 Windows 预览体验计划
执行 Windows 11 安装助手
其他可尝试方案
使用AveYo的脚本后通过 Windows 预览体验计划在线更新到最新版本（如果版本差距很大，可能无法成功）
使用AveYo的脚本跳过硬件检查直接创建（下载）Win11安装文件
官网下载安装文件后使用AveYo的脚本跳过硬件检查
其他大概率已经失效的方法

在硬件不满足条件并使用修改注册表项方式从Win10升级到Win11后（或全新安装亦同，具体参见 Win10 & Win11 安装和使用手记），Win11可以正常进行安全、features等日常更新，但最终会停留在最初的21H2版本，无法自动升级到最新的大版本（比如22H2、23H2及最新的24H2）。

由于21H2版本会在后续超出维护期限，故会在桌面右下角的状态栏上有更新红点提示问题：你的 Windows 11 版本已终止服务。单击以下载较新版本的 Windows 11 以保持受支持。

按照提示单击后会跳转到 Windows更新窗口，但是检查更新会提示：你的设备缺少重要的安全更新。请确保设备保持打开状态并接通电源，以便更新可以完成。

实际上，按照要求接通电源并保持设备打开也不会再继续接受更新，无法自动升级到比21H2更新的大版本。

24H2
Windows 11 24H2 是微软于2024年10月推出的重大年度更新（版本号26100），聚焦AI融合、性能优化与安全性提升。该版本深度集成Copilot+ AI功能，新增屏幕内容回溯工具Recall（支持本地语义索引）、实时多语言字幕、AI图像生成（Cocreator）等智能特性；性能方面优化了文件资源管理器（多标签页、7-zip压缩支持）、游戏帧率（DirectSR API）及电源管理，并原生支持Wi-Fi 7和蓝牙LE音频，提升网络与硬件兼容性；界面引入HDR桌面背景、可滚动任务栏菜单和更直观的开始菜单布局。安全层面通过Rust重构内核组件、增强本地数据加密（PDE）及受保护打印模式，同时首次推出面向企业的LTSC长期支持版本。系统要求升级至x86-64-v2指令集，强化了对新硬件的支持。

如果满足硬件限制（可以通过TPM和CPU验证），是可以从21H2通过Windows更新自动升级至更高的22H2、23H2版本，并在今年4月份开始陆续接收到24H2版本的升级推送。

安装/升级推荐方案
微软官网下载：Windows 11 安装助手
微软官网地址：https://www.microsoft.com/zh-cn/software-download/windows11

在“Windows 11 安装助手”小节下，单击立即下载以开始。下载后先不需要运行，因为无法满足硬件限制也无法继续安装。

下载跳过TPM验证的脚本并管理员权限运行
作者AveYo的来源地址：https://github.com/AveYo/MediaCreationTool.bat/blob/main/bypass11/Skip_TPM_Check_on_Dynamic_Update.cmd

或者将以下的内容保存为 Skip_TPM_Check_on_Dynamic_Update.cmd 纯文本文件即可：
@(set ‘(=)||’ <# lean and mean cmd / powershell hybrid #> @’

::# Get 11 on ‘unsupported’ PC via Windows Update or mounted ISO (no patching needed)
::# if WU is stuck use windows_update_refresh.bat; Beta/Dev/Canary needs OfflineInsiderEnroll
::# V13: skip 2nd tpm check on Canary iso; no Server label; future proofing; tested with 26010 iso, wu and wu repair version

@echo off & title get 11 on ‘unsupported’ PC || AveYo 2023.12.07
if /i “%~f0” neq “%SystemDrive%\Scripts\get11.cmd” goto setup
powershell -win 1 -nop -c “;”
set CLI=%*& set SOURCES=%SystemDrive%\$WINDOWS.~BT\Sources& set MEDIA=.& set MOD=CLI& set PRE=WUA& set /a VER=11
if not defined CLI (exit /b) else if not exist %SOURCES%\SetupHost.exe (exit /b)
if not exist %SOURCES%\WindowsUpdateBox.exe mklink /h %SOURCES%\WindowsUpdateBox.exe %SOURCES%\SetupHost.exe
reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate /f /v DisableWUfBSafeguards /d 1 /t reg_dword
reg add HKLM\SYSTEM\Setup\MoSetup /f /v AllowUpgradesWithUnsupportedTPMorCPU /d 1 /t reg_dword
set OPT=/Compat IgnoreWarning /MigrateDrivers All /Telemetry Disable
set /a restart_application=0x800705BB & (call set CLI=%%CLI:%1 =%%)
set /a incorrect_parameter=0x80070057 & (set SRV=%CLI:/Product Client =%)
set /a launch_option_error=0xc190010a & (set SRV=%SRV:/Product Server =%)
for %%W in (%CLI%) do if /i %%W == /PreDownload (set MOD=SRV)
for %%W in (%CLI%) do if /i %%W == /InstallFile (set PRE=ISO& set “MEDIA=”) else if not defined MEDIA set “MEDIA=%%~dpW”
if %VER% == 11 for %%W in (“%MEDIA%appraiserres.dll”) do if exist %%W if %%~zW == 0 set AlreadyPatched=1 & set /a VER=10
if %VER% == 11 findstr /r “P.r.o.d.u.c.t.V.e.r.s.i.o.n…1.0…0…2.[2-9]” %SOURCES%\SetupHost.exe >nul 2>nul || set /a VER=10
if %VER% == 11 if not exist “%MEDIA%EI.cfg” (echo;[Channel]>%SOURCES%\EI.cfg & echo;Default>>%SOURCES%\EI.cfg) if %VER%%PRE% == 11_ISO (%SOURCES%\WindowsUpdateBox.exe /Product Server /PreDownload /Quiet %OPT%)
if %VER%%PRE% == 11_ISO (del /f /q %SOURCES%\appraiserres.dll 2>nul & cd.>%SOURCES%\appraiserres.dll & call :canary) if %VER%%MOD% == 11_SRV (set ARG=%OPT% %SRV% /Product Server)
if %VER%_%MOD% == 11_CLI (set ARG=%OPT% %CLI%)
%SOURCES%\WindowsUpdateBox.exe %ARG%
if %errorlevel% == %restart_application% (call :canary & %SOURCES%\WindowsUpdateBox.exe %ARG%)
exit /b

:canary iso skip 2nd tpm check by AveYo
set C= $X=’%SOURCES%\hwreqchk.dll’; $Y=’SQ_TpmVersion GTE 1′; $Z=’SQ_TpmVersion GTE 0′; if (test-path $X) {
set C=%C% try { takeown.exe /f $X /a; icacls.exe $X /grant *S-1-5-32-544:f; attrib -R -S $X; [io.file]::OpenWrite($X).close() }
set C=%C% catch { return }; $R=[Text.Encoding]::UTF8.GetBytes($Z); $l=$R.Length; $i=2; $w=!1;
set C=%C% $B=[io.file]::ReadAllBytes($X); $H=[BitConverter]::ToString($B) -replace ‘-‘;
set C=%C% $S=[BitConverter]::ToString([Text.Encoding]::UTF8.GetBytes($Y)) -replace ‘-‘;
set C=%C% do { $i=$H.IndexOf($S, $i + 2); if ($i -gt 0) { $w=!0; for ($k=0; $k -lt $l; $k++) { $B[$k + $i / 2]=$R[$k] } } }
set C=%C% until ($i -lt 1); if ($w) { [io.file]::WriteAllBytes($X, $B); [GC]::Collect() } }
if %VER%_%PRE% == 11_ISO powershell -nop -c iex($env:C) >nul 2>nul
exit /b

:setup
::# elevate with native shell by AveYo
nul reg add hkcu\software\classes.Admin\shell\runas\command /f /ve /d “cmd /x /d /r set \”f0=%%2\”& call \”%%2\” %%3″& set = %* nul fltmc|| if “%f0%” neq “%~f0″ (cd.>”%temp%\runas.Admin” & start “%~n0” /high “%temp%\runas.Admin” “%~f0” “%:”=””%” & exit /b)

::# toggle when launched without arguments, else jump to arguments: “install” or “remove”
set CLI=%*& (set IFEO=HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options)
wmic /namespace:”\root\subscription” path __EventFilter where Name=”Skip TPM Check on Dynamic Update” delete >nul 2>nul & rem v1
reg delete “%IFEO%\vdsldr.exe” /f 2>nul & rem v2 – v5
if /i “%CLI%”==”” reg query “%IFEO%\SetupHost.exe\0” /v Debugger >nul 2>nul && goto remove || goto install
if /i “%~1″==”install” (goto install) else if /i “%~1″==”remove” goto remove

:install
mkdir %SystemDrive%\Scripts >nul 2>nul & copy /y “%~f0” “%SystemDrive%\Scripts\get11.cmd” >nul 2>nul
reg add “%IFEO%\SetupHost.exe” /f /v UseFilter /d 1 /t reg_dword >nul
reg add “%IFEO%\SetupHost.exe\0” /f /v FilterFullPath /d “%SystemDrive%\$WINDOWS.~BT\Sources\SetupHost.exe” >nul
reg add “%IFEO%\SetupHost.exe\0” /f /v Debugger /d “%SystemDrive%\Scripts\get11.cmd” >nul
echo;
%<%:f0 ” Skip TPM Check on Dynamic Update V13 “%>>% & %<%:2f ” INSTALLED “%>>% & %<%:f0 ” run again to remove “%>%
if /i “%CLI%”==”” timeout /t 7
exit /b

:remove
del /f /q “%SystemDrive%\Scripts\get11.cmd” “%Public%\get11.cmd” “%ProgramData%\get11.cmd” >nul 2>nul
reg delete “%IFEO%\SetupHost.exe” /f >nul 2>nul
echo;
%<%:f0 ” Skip TPM Check on Dynamic Update V13 “%>>% & %<%:df ” REMOVED “%>>% & %<%:f0 ” run again to install “%>%
if /i “%CLI%”==”” timeout /t 7
exit /b

‘@); $0 = “$env:temp\Skip_TPM_Check_on_Dynamic_Update.cmd”; ${(=)||} -split “\r?\n” | out-file $0 -encoding default -force; & $0

press enter

右键点击 Skip_TPM_Check_on_Dynamic_Update.cmd 并选择管理员权限运行，运行一次即可，无需操作（再次运行会执行清除操作！！）

下载脚本开启 Windows 预览体验计划
开启 Windows 预览体验计划可以提前获取到最新的（内部的、可能不稳定的）更新推送，但是如果在Windows更新中直接开启需要链接账户，使用该脚本可以直接开启。

作者AveYo的来源地址：https://github.com/abbodi1406/offlineinsiderenroll/releases
可选的参考简体中文fork说明：https://github.com/apoint123/offlineinsiderenroll

或者将以下内容复制到 OfflineInsiderEnroll.cmd 纯文本文件中即可：

@setlocal DisableDelayedExpansion
@echo off
set “scriptver=2.6.4”
set “_args=%” set “_elv=” if not defined _args goto :NoProgArgs if “%~1″==”” set “_args=”&goto :NoProgArgs set _args=%_args:”=% for %%A in (%_args%) do ( if /i “%%A”==”-wow” (set _rel1=1) else if /i “%%A”==”-arm” (set _rel2=1) ) :NoProgArgs set “_cmdf=%~f0” if exist “%SystemRoot%\Sysnative\cmd.exe” if not defined _rel1 ( setlocal EnableDelayedExpansion start %SystemRoot%\Sysnative\cmd.exe /c “”!_cmdf!” -wow %“
exit /b
)
if exist “%SystemRoot%\SysArm32\cmd.exe” if /i %PROCESSOR_ARCHITECTURE%==AMD64 if not defined _rel2 (
setlocal EnableDelayedExpansion
start %SystemRoot%\SysArm32\cmd.exe /c “”!_cmdf!” -arm %*”
exit /b
)
set “SysPath=%SystemRoot%\System32”
set “Path=%SystemRoot%\System32;%SystemRoot%\System32\Wbem;%SystemRoot%\System32\WindowsPowerShell\v1.0\”
if exist “%SystemRoot%\Sysnative\reg.exe” (
set “SysPath=%SystemRoot%\Sysnative”
set “Path=%SystemRoot%\Sysnative;%SystemRoot%\Sysnative\Wbem;%SystemRoot%\Sysnative\WindowsPowerShell\v1.0\;%Path%”
)
for /f “tokens=6 delims=[]. ” %%i in (‘ver’) do set build=%%i
if %build% LSS 17763 (
echo =============================================================
echo The script is compatible only with Windows 10 v1809 and later
echo =============================================================
echo.
pause
goto :EOF
)
reg query HKU\S-1-5-19 1>nul 2>nul
if %ERRORLEVEL% equ 0 goto :START_SCRIPT
echo =====================================================
echo This script needs to be executed as an administrator.
echo =====================================================
echo.
pause
goto :EOF

:START_SCRIPT
set “FlightSigningEnabled=0”
bcdedit /enum {current} | findstr /I /R /C:”^flightsigning *Yes$” >nul 2>&1
if %ERRORLEVEL% equ 0 set “FlightSigningEnabled=1”

:CHOICE_MENU
cls
title OfflineInsiderEnroll v%scriptver%
set “choice=”
echo.
echo 0 – Canary Channel
echo 1 – Dev Channel
echo 2 – Beta Channel
echo 3 – Release Preview Channel
echo.
echo 4 – Stop receiving Windows Insider builds
echo 5 – Quit without making any changes
echo.
set /p choice=”Choice: “
echo.
if /I “%choice%”==”0” goto :ENROLL_CAN
if /I “%choice%”==”1” goto :ENROLL_DEV
if /I “%choice%”==”2” goto :ENROLL_BETA
if /I “%choice%”==”3” goto :ENROLL_RP
if /I “%choice%”==”4” goto :STOP_INSIDER
if /I “%choice%”==”5” goto :EOF
goto :CHOICE_MENU

:ENROLL_RP
set “Channel=ReleasePreview”
set “Fancy=Release Preview Channel”
set “BRL=8”
set “Content=Mainline”
set “Ring=External”
set “RID=11”
goto :ENROLL

:ENROLL_BETA
set “Channel=Beta”
set “Fancy=Beta Channel”
set “BRL=4”
set “Content=Mainline”
set “Ring=External”
set “RID=11”
goto :ENROLL

:ENROLL_DEV
set “Channel=Dev”
set “Fancy=Dev Channel”
set “BRL=2”
set “Content=Mainline”
set “Ring=External”
set “RID=11”
goto :ENROLL

:ENROLL_CAN
set “Channel=CanaryChannel”
set “Fancy=Canary Channel”
set “BRL=”
set “Content=Mainline”
set “Ring=External”
set “RID=11”
goto :ENROLL

:RESET_INSIDER_CONFIG
reg delete “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\Account” /f
reg delete “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\Applicability” /f
reg delete “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\Cache” /f
reg delete “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\ClientState” /f
reg delete “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\UI” /f
reg delete “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\Restricted” /f
reg delete “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\ToastNotification” /f
reg delete “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\SLS\Programs\WUMUDCat” /f
reg delete “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\SLS\Programs\Ring%Ring%” /f
reg delete “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\SLS\Programs\RingExternal” /f
reg delete “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\SLS\Programs\RingPreview” /f
reg delete “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\SLS\Programs\RingInsiderSlow” /f
reg delete “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\SLS\Programs\RingInsiderFast” /f
reg delete “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection” /f /v AllowTelemetry
reg delete “HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection” /f /v AllowTelemetry
reg delete “HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate” /f /v BranchReadinessLevel
reg delete “HKEY_LOCAL_MACHINE\SYSTEM\Setup\WindowsUpdate” /f /v AllowWindowsUpdate
reg delete “HKEY_LOCAL_MACHINE\SYSTEM\Setup\MoSetup” /f /v AllowUpgradesWithUnsupportedTPMOrCPU
reg delete “HKEY_LOCAL_MACHINE\SYSTEM\Setup\LabConfig” /f /v BypassRAMCheck
reg delete “HKEY_LOCAL_MACHINE\SYSTEM\Setup\LabConfig” /f /v BypassSecureBootCheck
reg delete “HKEY_LOCAL_MACHINE\SYSTEM\Setup\LabConfig” /f /v BypassStorageCheck
reg delete “HKEY_LOCAL_MACHINE\SYSTEM\Setup\LabConfig” /f /v BypassTPMCheck
reg delete “HKEY_CURRENT_USER\SOFTWARE\Microsoft\PCHC” /f /v UpgradeEligibility
goto :EOF

:ADD_INSIDER_CONFIG
reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Orchestrator” /f /t REG_DWORD /v EnableUUPScan /d 1
reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\SLS\Programs\Ring%Ring%” /f /t REG_DWORD /v Enabled /d 1
reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\SLS\Programs\WUMUDCat” /f /t REG_DWORD /v WUMUDCATEnabled /d 1
reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\Applicability” /f /t REG_DWORD /v EnablePreviewBuilds /d 2
reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\Applicability” /f /t REG_DWORD /v IsBuildFlightingEnabled /d 1
reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\Applicability” /f /t REG_DWORD /v IsConfigSettingsFlightingEnabled /d 1
reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\Applicability” /f /t REG_DWORD /v IsConfigExpFlightingEnabled /d 0
reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\Applicability” /f /t REG_DWORD /v TestFlags /d 32
reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\Applicability” /f /t REG_DWORD /v RingId /d %RID%
reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\Applicability” /f /t REG_SZ /v Ring /d “%Ring%”
reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\Applicability” /f /t REG_SZ /v ContentType /d “%Content%”
reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\Applicability” /f /t REG_SZ /v BranchName /d “%Channel%”
if %build% LSS 21990 reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\UI\Strings” /f /t REG_SZ /v StickyXaml /d “This device has been enrolled to the Windows Insider program using OfflineInsiderEnroll v%scriptver%. If you want to change settings of the enrollment or stop receiving Windows Insider builds, please use the script. Learn more %Fancy%Windows Insider Program requires your diagnostic data collection settings to be set to Full. You can verify or modify your current settings in Diagnostics & feedback.Open Diagnostics & feedback”
reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\UI\Visibility” /f /t REG_DWORD /v UIHiddenElements /d 65535
reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\UI\Visibility” /f /t REG_DWORD /v UIDisabledElements /d 65535
reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\UI\Visibility” /f /t REG_DWORD /v UIServiceDrivenElementVisibility /d 0
reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\UI\Visibility” /f /t REG_DWORD /v UIErrorMessageVisibility /d 192
reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection” /f /t REG_DWORD /v AllowTelemetry /d 3
if defined BRL reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate” /f /t REG_DWORD /v BranchReadinessLevel /d %BRL%
reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\UI\Visibility” /f /t REG_DWORD /v UIHiddenElements_Rejuv /d 65534
reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\UI\Visibility” /f /t REG_DWORD /v UIDisabledElements_Rejuv /d 65535
reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\UI\Selection” /f /t REG_SZ /v UIRing /d “%Ring%”
reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\UI\Selection” /f /t REG_SZ /v UIContentType /d “%Content%”
reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\UI\Selection” /f /t REG_SZ /v UIBranch /d “%Channel%”
reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\UI\Selection” /f /t REG_DWORD /v UIOptin /d 1
reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\Applicability” /f /t REG_SZ /v RingBackup /d “%Ring%”
reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\Applicability” /f /t REG_SZ /v RingBackupV2 /d “%Ring%”
reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\Applicability” /f /t REG_SZ /v BranchBackup /d “%Channel%”
reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\Cache” /f /t REG_SZ /v PropertyIgnoreList /d “AccountsBlob;;CTACBlob;FlightIDBlob;ServiceDrivenActionResults”
reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\Cache” /f /t REG_SZ /v RequestedCTACAppIds /d “WU;FSS”
reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\Account” /f /t REG_DWORD /v SupportedTypes /d 3
reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\Account” /f /t REG_DWORD /v Status /d 8
reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\Applicability” /f /t REG_DWORD /v UseSettingsExperience /d 0
reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\ClientState” /f /t REG_DWORD /v AllowFSSCommunications /d 0
reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\ClientState” /f /t REG_DWORD /v UICapabilities /d 1
reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\ClientState” /f /t REG_DWORD /v IgnoreConsolidation /d 1
reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\ClientState” /f /t REG_DWORD /v MsaUserTicketHr /d 0
reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\ClientState” /f /t REG_DWORD /v MsaDeviceTicketHr /d 0
reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\ClientState” /f /t REG_DWORD /v ValidateOnlineHr /d 0
reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\ClientState” /f /t REG_DWORD /v LastHR /d 0
reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\ClientState” /f /t REG_DWORD /v ErrorState /d 0
reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\ClientState” /f /t REG_DWORD /v PilotInfoRing /d 3
reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\ClientState” /f /t REG_DWORD /v RegistryAllowlistVersion /d 4
reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\ClientState” /f /t REG_DWORD /v FileAllowlistVersion /d 1
reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\UI” /f /t REG_DWORD /v UIControllableState /d 0
reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\UI\Selection” /f /t REG_DWORD /v UIDialogConsent /d 0
reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\UI\Selection” /f /t REG_DWORD /v UIUsage /d 26
reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\UI\Selection” /f /t REG_DWORD /v OptOutState /d 25
reg add “HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\UI\Selection” /f /t REG_DWORD /v AdvancedToggleState /d 24
reg add “HKEY_LOCAL_MACHINE\SYSTEM\Setup\WindowsUpdate” /f /t REG_DWORD /v AllowWindowsUpdate /d 1
reg add “HKEY_LOCAL_MACHINE\SYSTEM\Setup\MoSetup” /f /t REG_DWORD /v AllowUpgradesWithUnsupportedTPMOrCPU /d 1
reg add “HKEY_LOCAL_MACHINE\SYSTEM\Setup\LabConfig” /f /t REG_DWORD /v BypassRAMCheck /d 1
reg add “HKEY_LOCAL_MACHINE\SYSTEM\Setup\LabConfig” /f /t REG_DWORD /v BypassSecureBootCheck /d 1
reg add “HKEY_LOCAL_MACHINE\SYSTEM\Setup\LabConfig” /f /t REG_DWORD /v BypassStorageCheck /d 1
reg add “HKEY_LOCAL_MACHINE\SYSTEM\Setup\LabConfig” /f /t REG_DWORD /v BypassTPMCheck /d 1
reg add “HKEY_CURRENT_USER\SOFTWARE\Microsoft\PCHC” /f /t REG_DWORD /v UpgradeEligibility /d 1
if %build% LSS 21990 goto :EOF
(
echo Windows Registry Editor Version 5.00
echo.
echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsSelfHost\UI\Strings]
echo “StickyMessage”=”{\”Message\”:\”Device Enrolled Using OfflineInsiderEnroll\”,\”LinkTitle\”:\”\”,\”LinkUrl\”:\”\”,\”DynamicXaml\”:\”^^This device has been enrolled to the Windows Insider program using OfflineInsiderEnroll v%scriptver%. If you want to change settings of the enrollment or stop receiving Windows Insider builds, please use the script. ^Learn more^^^^^^^ ^%Fancy%^^^^^^Windows Insider Program requires your diagnostic data collection settings to be set to ^Full^. You can verify or modify your current settings in ^Diagnostics ^& feedback^.^^^Open Diagnostics ^& feedback^^^\”,\”Severity\”:0}”
echo.
)>”%SystemRoot%\oie.reg”
reg.exe import “%SystemRoot%\oie.reg”
del /f /q “%SystemRoot%\oie.reg”
goto :EOF :ENROLL
echo Applying changes…
call :RESET_INSIDER_CONFIG 1>NUL 2>NUL
call :ADD_INSIDER_CONFIG 1>NUL 2>NUL
bcdedit /set {current} flightsigning yes >nul 2>&1
echo Done. echo.
if %FlightSigningEnabled% neq 1 goto :ASK_FOR_REBOOT
echo Press any key to exit.
pause >nul
goto :EOF :STOP_INSIDER
echo Applying changes…
call :RESET_INSIDER_CONFIG 1>nul 2>nul
bcdedit /deletevalue {current} flightsigning >nul 2>&1
echo Done. echo.
if %FlightSigningEnabled% neq 0 goto :ASK_FOR_REBOOT
echo Press any key to exit.
pause >nul
goto :EOF :ASK_FOR_REBOOT
set “choice=”
echo A reboot is required to finish applying changes.
set /p choice=”Would you like to reboot your PC? (y/N) “
if /I “%choice%”==”y” shutdown -r -t 0
goto :EOF
下载后点击右键使用管理员权限运行，建议选择“ReleasePreview”渠道，它有着接近正式版本的质量；dev渠道是最新但最不稳定的内部版本。同样，也可以通过该脚本关闭 Windows 预览体验计划。执行 Windows 11 安装助手
双击下载的 Windows 11 安装助手，使用管理员权限执行该程序。如果一切顺利，应该可以看到恭喜本设备满足安装 Windows 11 安装条件的提示。（如果没有可以重新核对以上步骤或执行后文的其他可尝试方案）根据提示一步步完成 Windows 11 的升级或者全新安装即可。该程序会自动从网络上下载合适版本的安装文件，耐心等待。在执行安装过程的末尾阶段（80%以上至接近完成时）进度会突然变得进展很慢，这是正常现象，耐心等待完成即可。 Windows 11 安装助手准备好后，还会调用 Windows 11 安装程序继续接下来的安装步骤，依据提示操作即可，其中一些步骤如下载、解压等依赖网速和电脑性能而时间可能较长，耐心等待，无需更多操作。如果在90%的进度报错停止，可以手工执行电脑的重启，就会在重启之后继续安装过程。其他可尝试方案
使用AveYo的脚本后通过 Windows 预览体验计划在线更新到最新版本（如果版本差距很大，可能无法成功）
下载跳过TPM检查脚本并管理员权限执行：https://github.com/AveYo/MediaCreationTool.bat/blob/main/bypass11/Skip_TPM_Check_on_Dynamic_Update.cmd
下载离线开启Windows 预览体验计划的脚本并管理员权限执行：https://github.com/abbodi1406/offlineinsiderenroll/releases
在 Windows更新中点击立即更新，接收最新的更新推送。
使用AveYo的脚本跳过硬件检查直接创建（下载）Win11安装文件
下载脚本并管理员权限执行：https://github.com/AveYo/MediaCreationTool.bat/blob/main/MediaCreationTool.bat
可以选择创建多种方式（如升级、全新安装或可选择的多版本）的Win11安装文件，建议选择“Select”来创建后期可以再选择是升级还是全新安装的版本。
之后根据调用的Win11安装程序的提示，一步步完成完成即可，包括可以选择Win11安装文件的位置如U盘安装还是ISO镜像刻录等。
最后，使用U盘安装或者ISO镜像来完成最后的安装，该安装过程会直接跳过硬件检测（TPM和CPU验证），其他同正常的安装步骤没有差别。
官网下载安装文件后使用AveYo的脚本跳过硬件检查
在微软官网下载Win11页面（https://www.microsoft.com/zh-cn/software-download/windows11），选择“创建 Windows 11 安装媒体”（U盘或ISO镜像），或者“下载适用于 x64 设备的 Windows 11 磁盘映像 (ISO)”（直接下载多版本ISO镜像），得到Win11的原始安装文件。
使用AveYo的脚本对原始安装文件添加跳过硬件限制的旁路：https://github.com/AveYo/MediaCreationTool.bat/blob/main/bypass11/Quick_11_iso_esd_wim_TPM_toggle.bat
或者，在执行安装之前执行AveYo的脚本来跳过硬件检测的步骤：https://github.com/AveYo/MediaCreationTool.bat/blob/main/bypass11/Skip_TPM_Check_on_Dynamic_Update.cmd
或者，使用 Rufus 勾选 “删除 TPM 2.0 要求”、“删除 Secure Boot 要求” 等选项，创建绕过检测的安装盘。Rufus 是一款开源软件，更多的说明可以参见其官网：https://rufus.ie/zh/
最后，运行经过处理的原始安装文件即可。
其他大概率已经失效的方法
修改注册表HKEY_LOCAL_MACHINE\SYSTEM\Setup\LabConfig：具体参见 Win10 & Win11 安装和使用手记 # 第6代酷睿CPU怎么升级Win11
修改注册表：HKEY_LOCAL_MACHINE\SYSTEM\Setup\MoSetup：新建 – DWORD（32 位）值（D），将其命名为 “AllowUpgradesWithUnsupportedTPMOrCPU”，数值数据修改为 “1”。
替换为Win10的 appraiserres.dll 文件：该文件为安装程序的检测文件，一般位于\Windows\System32下，替换为Win10的版本从而跳过检测（安装包中名称是appraiserres.dll，系统中名称是appraiser.dll）。
更多参考
了解 Windows 11 规格、功能和电脑要求：https://www.microsoft.com/zh-cn/windows/windows-11-specifications
———————————————— 版权声明：本文为博主原创文章，遵循 CC 4.0 BY-SA 版权协议，转载请附上原文出处链接和本声明。 原文链接：https://blog.csdn.net/zhiyuan411/article/details/146978089

BosART

Follow Us

Win11绕过硬件限制（TPM和CPU验证）安装或升级24H2

近期文章

近期评论

测试

About Us

Blog

Features

Shortcode

Contact Us

Our Services

Worpress

Web Design

Ecommerce

SEO

Our Team

Zahera

Alex

Sara

Mark

Testimonials

Safira

Alana

Sara

Our Partners