Microsoft blocks all options to bypass MS Account on new Installs

I used the Britec09 approach a few months ago and it worked perfectly.

If I want anything from the Microsoft store, I can always use the "other site".

This is another Bitlocker link:

Whatever you do make sure you unlock the drive. If you are locked out your only option is to completely wipe it (delete all partitions) and reinstalled Windows, but I would rather not try my luck with that. From what I read on other threads BitLocker automatically locks the drive on certain systems if you install Windows 11 24H2 and login with your Microsoft account. So you better disable it and also disable Secure Boot.

Sorry for late reply, had to work today. Thanks to all the replies they were enlightening. I've searched some data and as you guys warned starting with Win-11 24H2 MS setup automatically activates BitLocker encryption during reinstallation. The new encryption process not only affects Windows 11 Pro users but also impacts Windows 11 Home users.
With Windows 11 Home the device encryption can be applied through the device manufacturer if the manufacturer enables the encryption flag in the UEFI. This is said to take effect after signing in with your Microsoft account.
Will try again this evening to login my MS Acct on new Laptop. Create a local Acct and delete the MS Acct off my Laptop. So far all I've been able to see is the power on question setup to as far a login to MS Acct. I bought the Laptop at a Sam's club Christmas Sale. It seems to work fine, just would rather be able to see more graphic display before I clean install over it.
I surmise if something was wrong with the display Sam's would still let me return it even if I'd done a clean install. But now days some places are changing some of their return polices on new Laptops.
Anyhow if MS still won't let me log into my Acct then I'll just have do a clean install. Probably use Rufus to create a Win ISO USB and check the boxes to Remove requirements for Secure Boot, Create Local Acct, Disable collection, Disable Bitlocker auto device encryption.

In summation, all this Auto Encryption default setup leaves me a bit confused still about if the encryption is enabled when I log into MS Acct and then I create a local acct and disable it.
What happens if (for whatever reasons) I log into my MS Acct on this Laptop in the future. Are there any ramifications to the encryption settings left in the MS Acct previously?

RH247a said:

In summation, all this Auto Encryption default setup leaves me a bit confused still about if the encryption is enabled when I log into MS Acct and then I create a local acct and disable it.

Click to expand...

Creating your Windows 11 24H2 install media using RUFUS could be a solution for you.
RUFUS isn’t only available as a bypass for OS systems that do not meet the basic requirements of Windows 11, but is also just a general media creation tool.

You will have the option to:
A. Bypass Bitlocker encryption during install
B. Enable the creation of a local user account for the install.

RUFUS. (If you need help, ask)

Yet another reason to NOT connect to the internet at first boot and create a LOCAL account instead. The BitLocker will not lock the drive with a local account and you have the time to disable it.

antspants said:

Creating your Windows 11 24H2 install media using RUFUS could be a solution for you.
RUFUS isn’t only available as a bypass for OS systems that do not meet the basic requirements of Windows 11, but is also just a general media creation tool.

You will have the option to:
A. Bypass Bitlocker encryption during install
B. Enable the creation of a local user account for the install.

RUFUS. (If you need help, ask)

Rufus - Create bootable USB drives the easy way

Rufus: Create bootable USB drives the easy way

rufus.ie

Click to expand...

In what scenario would you use the Portable version vs. the Standard version?

Portable version doesn't need installation, it can run from any folder and from a USB flash drive. I always use it that way, no point to install it. I just run it directly from my Downloads folder.

spapakons said:

Portable version doesn't need installation, it can run from any folder and from a USB flash drive. I always use it that way, no point to install it. I just run it directly from my Downloads folder.

Click to expand...

So in what scenario would one use the Standard version?

cheaterslick said:

So in what scenario would one use the Standard version?

Click to expand...

There isn't really a definitive answer.
Bree ditty about portable appls [post #6] - ElevenForum
What Is a Portable App, and Why Does It Matter? - How-To Geek


Denis

dacrone said:

Press Shift+F10 when it asks for an internet connection.

Type: OOBE\BYPASSNRO


If that doesn’t work,

Press Shift+F10 when it asks for an internet connection.
Type taskmgr and hit the Enter button.
Click on the More details button.
Find the Network Connection Flow process.
Select it and click the End task button.
Close all windows and enter your name and password to continue.


**IF YOU HAVE ALREADY CONNECTED TO THE INTERNET DURING SETUP**

Press Shift+F10 to launch Command Prompt as Administrator

Type:
netsh wlan show interfaces
annotate your network name

Type:
netsh interface set interface name="WirelessNetworkName" admin=DISABLED

*Replace “WirelessNetworkName” with your Wi-Fi Interface Name*

• Close Command Prompt

After Windows 11 Install, Go to Device Manager and Enable Wireless NIC

Click to expand...

This method has worked for me on countless installs.

After which, MS will often add the Microsoft Account automatically after an update.

To stop this, I recommend using the latest version of:

O&O ShutUp10++: Free antispy tool for Windows 10 and 11
www.oo-software.com/en/shutup10



I've found that this (when configured with the suggested settings), now disables the Microsoft Account that gets automatically added to Windows 11 by MS.

Also, O&O ShutUp10++ DOES get updated and offers new updated versions for download with more new features.
If you use it, be sure to manually check periodically for newer versions.

I DO believe this will SOLVE your problem.

Good luck.

garlin said:

This is my surefire trick for 22H2 or 23H2 Pro, EDU or Enterprise editions (sorry Home users!):

- choose "Let’s set things up for your work or school"​

- click on "Sign in options" -> "Domain join instead"​

- "Who’s going to use this PC?"​

- enter your normal User Account name​

​

Done. Except for Home edition (which doesn't have Domain join), it doesn't depend on some fake e-mail triggering an error.

Click to expand...

Thanks @garlin , I'll definitely add this to my notes as a backup. With MS changes and tweaks on updates it may come in handy for many.

Once you create a local account, you will be asked for a Microsoft account only if you try to use an application or game that requires you to login. But if you are careful, you can avoid associating your Microsoft Account with Windows. You can only use your account for specific applications or games.

spapakons said:

Once you create a local account, you will be asked for a Microsoft account only if you try to use an application or game that requires you to login. But if you are careful, you can avoid associating your Microsoft Account with Windows.

Click to expand...

I held out against getting a Microsoft account for a long time. I could see no reason why I would want or need one. Then one day I needed to share a file with another member and the only viable way was to use OneDrive. So I reluctantly created an account, and since then I've found the MS account to be useful for a lot of other things. But I still don't see any need to or benefit from signing into Windows with it.

All my machines still have local accounts only. But they can all use my MS account. Just go to Settings > Accounts > Email & accounts and click 'Add a Microsoft account' under 'Accounts used by other apps'.

My gut tells me that very soon all the workarounds and jumping through hoops for using a local account to set up Windows will stop working entirely. I'll go so far as to predict it will happen in Windows 12. Even in Pro systems the process is no longer straightforward as it used to be. To me that's a sign of things to come. Corporate systems will be given special allowances that single users will not have.

There is one workaround we haven't done yet. Instead of tricking OOBE to allow us create a local account, we can press CTRL+SHIFT+F3 to temporarily bypass OOBE altogether and login with the built-in Administrator account (aka Audit Mode). Then we can create another local administrator account and restart back to OOBE. This time it should detect there is already a local account and let us proceed and login to that without creating a new one. Much like when upgrading from Windows 10 to 11. Or for those preferring scripts, we can create an unattended installation script to create the local account for us. Even easier, use the relevant option in Rufus when creating the USB flash drive from Windows 11 ISO.

spapakons said:

There is one workaround we haven't done yet. Instead of tricking OOBE to allow us create a local account, we can press CTRL+SHIFT+F3 to temporarily bypass OOBE altogether and login with the built-in Administrator account (aka Audit Mode). Then we can create another local administrator account and restart back to OOBE. This time it should detect there is already a local account and let us proceed and login to that without creating a new one. Much like when upgrading from Windows 10 to 11. Or for those preferring scripts, we can create an unattended installation script to create the local account for us. Even easier, use the relevant option in Rufus when creating the USB flash drive from Windows 11 ISO.

Click to expand...

That would be a neat trick, and if it works probably near-impossible for MS to block - Audit Mode should always be available.

glasskuter said:

My gut tells me that very soon all the workarounds and jumping through hoops for using a local account to set up Windows will stop working entirely. I'll go so far as to predict it will happen in Windows 12. Even in Pro systems the process is no longer straightforward as it used to be. To me that's a sign of things to come. Corporate systems will be given special allowances that single users will not have.

Click to expand...

The oobe method is an official MS solution aimed at institutions like laboratories and security companies where pcs must not be connected to the internet. Amost be definition, these could not be enterprise accounts then.

In the end, if MS want to entirely eliminate using a local account, then they would have to remove local accounts completely, which would negate the above.

So I do not think MS can entirely eliminate local accounts.

Android phones are pretty useless without a google account.
Not even sure if it is possible to use an apple without an account.

In the end, the vast majority of users will simply use an MS account.
I am not sure it is worth MS's effort chasing after the small amount of users who would go through hoops and loops to avoid using an MS account.

glasskuter said:

My gut tells me that very soon all the workarounds and jumping through hoops for using a local account to set up Windows will stop working entirely. I'll go so far as to predict it will happen in Windows 12. Even in Pro systems the process is no longer straightforward as it used to be. To me that's a sign of things to come. Corporate systems will be given special allowances that single users will not have.

Click to expand...

I think that's not going to happen.
Many countries, specially in Europe, are very concern about privacy and oblige someone to identify online every time he wants to use his computer is a big privacy violation.
And the oobe method is an official MS solution to allow to use a local account.

I beg to differ, as British say, an Android phone is not completely useless without a Google account. If you only want a few apps and games you can manually download the installers (aka .apk files) and side load them without connecting to a Google account. My mother until recently used her phone without a Google account, until she needed to connect to some Government electronic services and had to create one.