Windows 11 without a Microsoft account?

[Sky-Knight]

Exactly! I generally turn off notifications but, if something's super critical, it will still give a message. Windows Defender is a great bit of software. Beats all those other dinosaurs that we had to use before Defender came along.

Those other dinosaurs are usually better in detection, but av-comparatives over time? That better is 1%... I don't know too many people that have an extra $50-$100 a year to spend on 1%. So... Defender for Windows it is!

 

[britechguy]

but av-comparatives over time? That better is 1%...

If that. I've kept my eyes on the results from at least 3 different labs over the years, and almost to a one, Windows Defender is in the top 10, often the top 5, and beating out "the dinosaurs" overall.

In addition, if you do keep your eye on the testing results, you see that all of the top products routinely switch positions somewhere in the top 10 for each testing cycle. No one's perfect, and depending on exactly what samples are being used, and at exactly what time with exactly what definition updates (among other things), it's very easy to have something not be detected in the test that, *bam*, as soon as the next update to the scanner is applied it will be.

Anything that stays in the position that Windows Security/Defender has been in for this kind of testing, and for years, is a top-shelf product and in the "best in class" arena (as "best" is different per testing lab and testing cycle).

 

[YeOldeStonecat]

Windows PRO...you can always...always...always...set up a local user account, even when connected to the internet before you even power the device on. Just pay attention to each screen. There's a detour you take for business/domain...watch for small links.

We set up many...many brand new computers every week...out of the box, we connect ethernet, hit the power button....run through the out of box experience...setup our local user account..and THEN we'll either take onsite to join the clients on prem active directory, or..we'll join AzureAD at our office and set up that user profile ahead of time. Either way..we're always created a local user "back door local admin account" for ourselves.

 

[frase]

Home one can as well, just have the network disconnected. On a laptop of course one would be required to disable the wifi signal.
It then prompts use limited blah blah, then use a local account instead. No need to do the bypass or fake accounts. I have done four last week with no issues, all via the mediacreationtool.bat.

 

[ThatPlace928]

"You can still type OOBE\BYPASSNRO into Command Prompt during the Windows 11 setup experience, which lets you skip connecting to the internet and by extension linking a Microsoft Account. It's just an extra, annoying step that many people likely don't know exists. "

Microsoft might have blocked a sneaky bypass that let you setup Windows 11 without a Microsoft Account

Typing in a blocked email and password no longer tricks Windows 11 into letting you create a local account.

www.windowscentral.com

 

[britechguy]

"You can still type OOBE\BYPASSNRO into Command Prompt during the Windows 11 setup experience, which lets you skip connecting to the internet and by extension linking a Microsoft Account. It's just an extra, annoying step that many people likely don't know exists. "

Microsoft might have blocked a sneaky bypass that let you setup Windows 11 without a Microsoft Account

Typing in a blocked email and password no longer tricks Windows 11 into letting you create a local account.

www.windowscentral.com

Thanks. I still find it easier, if one insists on doing this, to temporarily unplug/disable WiFi where I'm working or "pretend" I can't connect to any of the available networks seen.

As we've both said, if it comes to doing this sort of work for a client, I always get information about an existing Microsoft Account, or discuss the creation of one once I am certain that they do not already have one. Fighting this just is not worth it to me anymore.

 

[ThatPlace928]

Thanks. I still find it easier, if one insists on doing this, to temporarily unplug/disable WiFi where I'm working or "pretend" I can't connect to any of the available networks seen.

As we've both said, if it comes to doing this sort of work for a client, I always get information about an existing Microsoft Account, or discuss the creation of one once I am certain that they do not already have one. Fighting this just is not worth it to me anymore.

I set up a dummy account in Outlook and use it on every laptop I set up. Once I'm in, I create a local user account and give it admin status. I don't delete my dummy account until I sell it. That way, I don't get a bunch of messages telling me I need a MS account. I delete mine and the customer can set it up however they like. For me, this is just the easiest way.

But I came across the article today so I thought I'd post it for info.

 

[callthatgirl]

I have them login with a blank@outlook.com account created during setup.
then in, I create a new user account with no MS account
give admin rights
log out, log in as new user
delete the other profile

 

[britechguy]

The problem with using dummy Microsoft Accounts is that then things like Bitlocker keys get associated with it, among other things.

It is best practice for the machine either to be intentionally set up with a local account only, with the purchaser then doing the first Microsoft Account to be associated with the device, or just starting off using the purchaser's Microsoft Account whenever that's possible.

I do not ever want a device associated with a non-real Microsoft Account. A device, it's owner, and their respective licenses all need to be tied up neatly with a bow in the box that is the Microsoft Account for that person.

 

[ThatPlace928]

The problem with using dummy Microsoft Accounts is that then things like Bitlocker keys get associated with it, among other things.

It is best practice for the machine either to be intentionally set up with a local account only, with the purchaser then doing the first Microsoft Account to be associated with the device, or just starting off using the purchaser's Microsoft Account whenever that's possible.

I do not ever want a device associated with a non-real Microsoft Account. A device, it's owner, and their respective licenses all need to be tied up neatly with a bow in the box that is the Microsoft Account for that person.

It's a valid Outlook account. I just don't use it for anything except setting up fresh installs. I can click on my account and get all the devices I've set up and their info.

Did you think I meant typing in a dummy account? I probably should have clarified my statement. I apologize if I was unclear.

 

[Canadian Tech]

I'm in the process of setting up a new custom built system and nothing is working to bypass the Windows 11 account signup. I tried OOBE\BYPASSNRO and it doesn't work, tried a dummy email/password and usually that works but it won't. I may have to go the route of creating an account for this.

 

[Porthos]

Did you think I meant typing in a dummy account?

How many computers do have currently in that account? I think there is a limit.

 

[ThatPlace928]

How many computers do have currently in that account? I think there is a limit.

I think I have around 20, maybe more. I haven't counted them but I believe they stay in my Outlook account until I delete my MS account from the device.

 

[britechguy]

Did you think I meant typing in a dummy account?

Not as in a literally non-existent account, but it is, for all practical intents and purposes, a dummy account. That account ends up having each and every device you initially configure using it associated with that account. If there are Bitlocker keys, they are associated with that account.

Yes, there are methods to shift a device between accounts, but I find it a grand PITA. If I do not have someone's Microsoft Account information for any reason, then I will resort to local account creation on a brand spankin' new machine, as it avoids having the device associated with any Microsoft Account, which is better than having it associated with a "bit bucket account" used strictly for setting up devices.

My attitude is that if you wouldn't do something when setting up an iPhone or an Android device that associated it with "the wrong account" then you don't do it for PCs in the age of Windows 10 and 11, either.

So it's either a local account or a Microsoft Account Linked Windows User Account that uses the correct Microsoft Account for linking.

 

[fincoder]

The only time I've been unable to setup with local account is with a cheap laptop that came with Windows in S Mode. I use the "work or school account" option with 11 Pro, otherwise I use oobe\bypassnro or non-existent email like no@thanks.com.

I still find it easier, if one insists on doing this, to temporarily unplug/disable WiFi where I'm working or "pretend" I can't connect to any of the available networks seen.

That doesn't work in Windows 11 (unless using a Rufus-tweaked installer). Standard 11 Home OOBE won't let you continue without connecting to a network.

 

[sapphirescales]

I tried OOBE\BYPASSNRO and it doesn't work

It only works if you don't connect to the internet. Reinstall Windows and this time don't connect to the internet before running the command. You might just be able to restart it but I think you have to reinstall Windows.

 

[Rigo]

It only works if you don't connect to the internet. Reinstall Windows and this time don't connect to the internet before running the command. You might just be able to restart it but I think you have to reinstall Windows.

Yes, if you connected to the internet that no longer works.
On https://www.technibble.com/forums/threads/laptop-setup-without-ms-login.90808/page-2
@mmerry posted a link:
https://answers.microsoft.com/en-us...ypassnro/4fc44554-b416-4ecb-8961-6f79fd55ae0f
I followed these steps below and didn't have to clean install, essentially force creating the local account to continue:

Johnny55

• Volunteer Moderator

Replied on May 17, 2022Report abuse


Since according to AveYo (thanks for this) this is only temporarily integrated into Windows 11 by Microsoft, one can assume that this command will not work for much longer. I truly hope it remains.

oobe\bypassnro

Then you can reactivate the Internet connection and add a password to the account, as well as make all other settings.

Alternative Workaround that should remain feasible, more trouble than the simple above command:

If the Internet is disabled, you start the reinstallation of Windows 11. You get to the window: "Unfortunately you have lost the Internet connection". From here it starts. Replace "User Name" with whatever you wish to use for the account:

Press Shift + F10. The command prompt opens

net.exe user "User Name" /add

net.exe localgroup "Administrators" "User Name" /add

cd OOBE

msoobe.exe && shutdown.exe -r

Windows will now restart and start with the other settings until Windows 11 is installed correctly with a local account.

When logging in, "The user name or password is incorrect" now appears.

Simply press OK and select the right account at the bottom left of screen. You should have one for Administrator and one for whatever name you used as "User Name" above.

Lets hope the simple oobe\bypassnro stays, as I have used both methods, and the first is by far the easiest.

Regards,

 

[Canadian Tech]

It only works if you don't connect to the internet. Reinstall Windows and this time don't connect to the internet before running the command. You might just be able to restart it but I think you have to reinstall Windows.

Nothing worked but I ended up pulling the wifi card then it worked.

 

[dcomp12]

At some point during the OOBE (I think when it asks to select a network) I do Shift + F10, get a command window, click it to give it focus then type in oobe\bypassnro and press enter. The machine reboots and you can then choose Limited or No Internet and set up a local account. May have to have network disconnected too, I usually don't so not 100% sure.

Always use the OOBE way but I had a Dell AIO with Windows 11 PRO and for some reason I couldn't do it that way. I had to actually kill the internet and then run the OOBE function and then I was able to create a local account.

 

[Big Jim]

At some point during the OOBE (I think when it asks to select a network) I do Shift + F10, get a command window, click it to give it focus then type in oobe\bypassnro and press enter. The machine reboots and you can then choose Limited or No Internet and set up a local account. May have to have network disconnected too, I usually don't so not 100% sure.

yeh this is all that we do for customers who don't want an MS account