New Windows 11 Bypass Lets Users Skip Internet and Microsoft Account During Setup

A new method has been discovered that allows Windows 11 Home users to complete initial setup without an internet connection or Microsoft account. The technique requires no command-line tools or scripts and was found by enthusiast Bob Pony. During the OOBE process, users simply open the sign-in options and click the Learn more link, which redirects the wizard to local account creation. Previous bypasses such as OOBE\bypassnro and start ms-cxh:localonly have already been blocked by Microsoft. The new approach appears to be an overlooked interface element and works only on the Home edition. Microsoft is expected to close this loophole in a future update as it continues tightening account requirements.

AntiMalwareTranslated from Russian

Read at source

A new method has been found that lets Windows 11 Home users bypass the mandatory internet connection and Microsoft account creation during the initial setup process.

The discovery was made by Windows enthusiast Bob Pony. Instead of using command-line commands or third-party scripts, users only need to click a single link that Microsoft itself placed on the setup screen.

During the OOBE phase, the user opens the sign-in options section and clicks the Learn more link. This action switches the wizard to local account mode, allowing installation to continue without network access or Microsoft authentication.

The method currently works only on the Windows 11 Home edition. Users of Pro and other editions must still rely on older or more complex workarounds.

Microsoft has been systematically removing previous bypass options. The well-known OOBE\bypassnro command and the start ms-cxh:localonly method have already been disabled. The newly found link is likely an unintended interface element or leftover logic, so it may be removed in an upcoming update.

Meridian digestThe week's most consequential security stories, distilled into one briefing.See the digest

More in Vulnerabilities & Exploits

Telegram for Android Patches Voice Call Vulnerability Enabling Code Execution
Yandex Patches Millions of Stations After eMudhra Certificate Keys Compromised
Cisco ASA and FTD Face DoS Vulnerability in SSL VPN Already Exploited in the Wild