Installation and Upgrade Switch out of S mode in Windows 11

  • Thread starter Thread starter Brink
  • Start date Published: Start date Updated Updated:

Windows_11_banner.png

This tutorial will show you how to switch out of S mode in Windows 11.

Windows 11 in S mode is a "secure" version of Windows 11 that is streamlined for security and performance, while providing a familiar Windows experience. To increase security, it allows only apps from Microsoft Store, and requires Microsoft Edge for safe browsing.

If you have a Windows 11 in S mode edition installed, you will only be able to install apps from the Microsoft Store only. If you want to install an app that isn't available in the Microsoft Store, you'll need to switch out of S mode.

Windows 11 in S mode is only available in the Windows 11 Home edition by default. If you have the Pro, Enterprise, or Education editions of Windows 10 in S mode, Windows Update will not offer Windows 11 because S mode is not available in those editions of Windows 11. Therefore, if you have the Pro, Enterprise or Education editions of Windows 10 in S mode, you'll need to switch out of S mode to upgrade to Windows 11.

Some devices come preinstalled with Windows 11 Home in S mode by the original equipment manufacturer.

⚠️ Switching out of S mode is one-way. If you make the switch, you won't be able to go back to Windows 11 in S mode. There's no charge to switch out of S mode.



References:


Contents

  • Option One: Switch out of S mode in Microsoft Store app
  • Option Two: Switch out of S mode by Disabling Secure Boot


EXAMPLE: "For security and performance, this mode of Windows only runs Microsoft-verified apps" from Microsoft Store

Cannot_run_desktop_app_in_S-Mode_message.png





Option One

Switch out of S mode in Microsoft Store app


You must be signed in as an administrator to use this option.

This option requires you to be signed into the Microsoft Store app with your Microsoft account.


1 Open Settings (Win+I).

2 Click/tap on System on the left side, and click/tap on Activation on the right side. (see screenshot below)


Switch_out_of_S_mode_in_Windows11-1.png

3 Click/tap on S mode to expand it open. (see screenshot below step 4)

4 Click/tap on Open Store. (see screenshot below)

It is required to be signed into the Microsoft Store app with your Microsoft account. You will be prompted to sign in to the Microsoft Store app with your Microsoft account if not already.


Switch_out_of_S_mode_in_Windows11-2.png

5 Click/tap on the Get button on the Microsoft Store Switch out of S mode page. (see screenshot below)

Switch_out_of_S_mode_in_Windows11-3.png

6 Click/tap on Close when you have successfully finished switching out of S mode. (see screenshot below)

Switch_out_of_S_mode_in_Windows11-4.png




Option Two

Switch out of S mode by Disabling Secure Boot


This option does not require you to be signed in with a Microsoft account.

This option can be handy if Option One above did not work for you.


1 Disable Secure Boot using option two in the tutorial below.


2 Windows 11 will automatically switch out of S Mode as the computer restarts.

3 After the computer restarts and you have verified Windows 11 is no longer in S Mode, click/tap on the Download button below to download the file below.

SkuPolicyRequired=0.reg


(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\CI\Policy]
"SkuPolicyRequired"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet\Control\CI\Policy]
"SkuPolicyRequired"=dword:00000000

4 Save the .reg file to your desktop.

5 If you have Smart App Control turned on, you will need to unblock the downloaded REG file.

6 Double click/tap on the downloaded .reg file to merge it.

7 When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.

8 Restart the computer.

9 You can now enable Secure Boot again using option one in the tutorial below. Windows 11 will not switch back into S Mode when you re-enable Secure Boot.



That's it,
Shawn Brink


Related Tutorials

 

Attachments

Last edited:

My Computers

System One System Two

  • OS
    Windows 11 Pro x64 24H2 v26200.5074
    Computer type
    PC/Desktop
    Manufacturer/Model
    Built Myself in 2025
    CPU
    AMD Ryzen 9 3600X 12-Core @ 3.80GHz
    Motherboard
    MSI X570 Gaming Plus
    Memory
    Corsair 32GB DDR4
    Graphics Card(s)
    EVGA GeForce gtx 1660 Super
    Sound Card
    On Board
    Monitor(s) Displays
    2 X AOC 27" , Dell 27"
    Screen Resolution
    1920 X 1080
    Hard Drives
    ~~~~~~~~~~~~~~~~~~~~~~~~~~
    ~ P34A60 512GB NVMe PCIe Gen3x4 M.2
    ~ 6TB Toshiba HDD
    ~ 6TB HDD (Backup)
    ~ SanDisk 250GB SSD
    ~ 2 X 1TB HDD
    ~~~~~~~~~~
    PSU
    eVGA 750w G+
    Case
    GAMDIAS White ATX Mid Tower Gaming Computer PC Case w/Tempered Glass
    Cooling
    AMD Wraith Prism
    Keyboard
    Nulea RT05 Wireless Ergonomic
    Mouse
    Nulea MD280 Wireless Vertical Mouse
    Internet Speed
    761Mbps (Download) / 692Mbps (Upload)
    Browser
    Firefox
    Antivirus
    Malwarebytes
    Other Info
    *This is my Main Computer That I use*
  • Operating System
    Windows 11 Pro x64 24H2 v26100.2894
    Computer type
    PC/Desktop
    CPU
    AMD Ryzen 7 1800X @ 3.60Ghz
    Motherboard
    Asus Crosshair VI Hero
    Memory
    16GB
    Graphics card(s)
    AMD RX580
    Sound Card
    onBoard
    Monitor(s) Displays
    LG 27UK650-W 27", eMachine 22"
    Screen Resolution
    1920 X 1080
    Hard Drives
    250GB SSD
    PSU
    CORSAIR RM850
    Case
    GAMDIAS Black ATX Mid Tower Gaming Computer PC Case w/Tempered Glass
    Cooling
    Liquid
    Keyboard
    Nulea RT05 Wireless Ergonomic
    Mouse
    Nulea MD280 Wireless Vertical Mouse
    Internet Speed
    752Mbps (Download) / 537Mbps (Upload)
    Browser
    Firefox
    Antivirus
    Malwarebytes
    Other Info
    I use this computer for photo/video editing and to track severe weather
Tutorial updated to add option two. :alien:
 

My Computers

System One System Two

  • OS
    Windows 11 Pro for Workstations
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom self build
    CPU
    Intel i7-8700K 5 GHz
    Motherboard
    ASUS ROG Maximus XI Formula Z390
    Memory
    64 GB (4x16GB) G.SKILL TridentZ RGB DDR4 3600 MHz (F4-3600C18D-32GTZR)
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING (11GB GDDR5X)
    Sound Card
    Integrated Digital Audio (S/PDIF)
    Monitor(s) Displays
    2 x Samsung Odyssey G75 27"
    Screen Resolution
    2560x1440
    Hard Drives
    1TB Samsung 990 PRO M.2,
    4TB Samsung 990 PRO M.2,
    TerraMaster F8 SSD Plus NAS
    PSU
    Seasonic Prime Titanium 850W
    Case
    Thermaltake Core P3 wall mounted
    Cooling
    Corsair Hydro H115i
    Keyboard
    Amazon Basics Wired Full Keyboard MD005
    Mouse
    Logitech MX Master 4
    Internet Speed
    2 Gbps Download and 100 Mbps Upload
    Browser
    Chrome and Edge
    Antivirus
    Microsoft Defender
    Other Info
    Logitech Z625 speaker system,
    Logitech BRIO 4K Pro webcam,
    HP Color LaserJet Pro MFP M477fdn,
    CyberPower CP1500PFCLCD
    Galaxy S23 Plus phone
  • Operating System
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Surface Laptop 7 Copilot+ PC
    CPU
    Snapdragon X Elite (12 core) 3.42 GHz
    Memory
    16 GB LPDDR5x-7467 MHz
    Monitor(s) Displays
    15" HDR
    Screen Resolution
    2496 x 1664
    Hard Drives
    1 TB SSD
    Internet Speed
    Wi-Fi 7 and Bluetooth 5.4
    Browser
    Chrome and Edge
    Antivirus
    Microsoft Defender
Option Two doesn't always work.

S mode also enables two UEFI variables, WinSiPolicyVersion and WinSiPolicyUpdateSigners, which can stay configured in your UEFI. A number of folks have pointed out you can enable Secure Boot, clean install Windows, and have S mode all over again.

Option One (running the Store app) will always work, and deletes both UEFI variables immediately.

To be sure, you should do this after disabling Secure Boot and booting Windows:
Code:
reg add HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\CI\Policy /v SkuPolicyRequired /t REG_DWORD /d 0 /f
shutdown /r /t 10

After the reboot, you're free to shutdown Windows and enable Secure Boot again.
 

My Computer

System One

  • OS
    Windows 7
Option Two doesn't always work.

S mode also enables two UEFI variables, WinSiPolicyVersion and WinSiPolicyUpdateSigners, which can stay configured in your UEFI. A number of folks have pointed out you can enable Secure Boot, clean install Windows, and have S mode all over again.

I just purchased a new laptop with 11 S mode and would like to have normal Home edition not the S mode. I have not yet powered the machine on. I removed the laptop SSD and installed in external enclosure, plugged into my desktop machine and created a full image of the drive (all partitions), in case I ever wanted to restore it to the 'untouched' factory software image state.

Are you saying I'm probably going to have to boot this thing up into Windows, go through all of that OOBE stuff and then proceed with the Microsoft Store way of turning off S mode?

Any way of editing/deleting those variables via command or script (after booting from WinPE or other environment on USB flash drive or something) so that I can clean install Windows 11 Home straight away?
 
Last edited:

My Computer

System One

  • OS
    All of them
From a WinPE or other USB boot drive, you can mount the live system's registry and clear the reg key.

But if you have the SSD mounted (as drive S:) on another PC, you don't need to bother from WinPE.
Code:
reg load HKLM\TEMP S:\Windows\System32\config\SYSTEM
reg add HKLM\TEMP\ControlSet001\Control\CI\Policy /v SkuPolicyRequired /t REG_DWORD /d 0 /f
reg unload HKLM\TEMP
 

My Computer

System One

  • OS
    Windows 7
I've seen another Reddit suggestion is which is to turn off Secure Boot, and boot the S mode system. Windows will detect it cannot enforce the policy (since Secure Boot isn't enabled), and silently drop the settings. Reboot again, and then you can shut down and enable Secure Boot.

The second reboot is important.
 

My Computer

System One

  • OS
    Windows 7
Those are just registry (i.e. software) keys? I interpreted your previous comment to mean the UEFI variables were written to some NVRAM in hardware (e.g. BIOS)? How else could a clean install still end up with Windows in S mode enabled?
 
Last edited:

My Computer

System One

  • OS
    All of them
It's not clear which UEFI settings make it remember there was a S mode before. I presume a factory reset from UEFI might remove it (since not all PC's are sold with S mode). The problem is I don't have one those systems to confirm the results.

If you're going to reinstall Windows anyway, boot up, sign on with a throwaway MS Account, and then install the Store app. Now wipe the machine and reinstall without having any UEFI leftovers.
 

My Computer

System One

  • OS
    Windows 7
I wonder if it might just be that OA/OEM digital license in the UEFI/BIOS, same one that embeds for Home or Pro, or other edition. Imma do clean install to see and will report back.
 

My Computer

System One

  • OS
    All of them
S is a policy mode, not a Windows Edition. For W11, S is only supported on Pro. You used to be able to run S on W10 Home.
 

My Computer

System One

  • OS
    Windows 7
I know S mode is not for pro so mode is for microsoft to completely take over as though your using a Ipad. S mode home version was on a new machine that I worked on. Not sure why you thought it was for pro only. Garlin stated this but not sure why there has to be another xplanation
 

My Computers

System One System Two

  • OS
    Windows 11 pro
    Computer type
    Laptop
    Manufacturer/Model
    Precision 7780
    CPU
    Processor 13th Gen Intel(R) Core(TM) i9-13950HX, 2200 M
    Motherboard
    Dell calls it the “system board” in the service manual.
    Memory
    64GIG
    Graphics Card(s)
    NVIDIA RTX 5000 Ada Generation Laptop GPU
    Sound Card
    NVIDIA HIGH DEFINITION AUDIO
    Monitor(s) Displays
    Samsung and a HP Monitor
    Screen Resolution
    Resolution 3840 x 2160 x 60 hertz
    Hard Drives
    3 1T NVME and 1 223 Gb
    PSU
    External
    Case
    Laptop
    Cooling
    Dual fans
    Keyboard
    LOGI REMOTE KEYBOARD
    Mouse
    LOGI REMOTE MOUSE
    Internet Speed
    538 Mbps 163 Mbps upload
    Browser
    Duck, Chrome, Edge, Opra
    Antivirus
    Norton Antivirus
  • Operating System
    WIN 11 PRO
    Computer type
    Laptop
    Manufacturer/Model
    HP
    CPU
    RTX ADA 5000
    Memory
    32
    Monitor(s) Displays
    MY BIG SCREEN TV
    Screen Resolution
    3840 X 2016
    Hard Drives
    2 NVME
    Keyboard
    REMOTE USB
    Mouse
    REMOTE USB LOGI
    Internet Speed
    FIBER TO MY DOOR
    Browser
    DUCK FIREFOX CHROME OPRA
    Antivirus
    NORTON

My Computers

System One System Two

  • OS
    Windows 11 Pro 25H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Dell Optiplex 7080
    CPU
    i9-10900 10 core 20 threads
    Motherboard
    DELL 0J37VM
    Memory
    32 gb
    Graphics Card(s)
    none-Intel UHD Graphics 630
    Sound Card
    Integrated Realtek
    Monitor(s) Displays
    Benq 27
    Screen Resolution
    2560x1440
    Hard Drives
    2x1tb Solidigm m.2 nvme /External drives 512gb Samsung m.2 sata+2tb Kingston m2.nvme
    PSU
    500w
    Case
    MT
    Cooling
    Dell Premium
    Keyboard
    Logitech wired
    Mouse
    Logitech wireless
    Internet Speed
    so slow I'm too embarrassed to tell
    Browser
    #1 Edge #2 Firefox
    Antivirus
    Defender+MWB Premium
  • Operating System
    Windows 11 Pro 24H2 26200.8457
    Computer type
    PC/Desktop
    Manufacturer/Model
    Beelink Mini PC SER5
    CPU
    AMD Ryzen 7 6800U
    Memory
    32 gb
    Graphics card(s)
    integrated
    Sound Card
    integrated
    Monitor(s) Displays
    Benq 27
    Screen Resolution
    2560x1440
    Hard Drives
    1TB Crucial nvme
    Keyboard
    Logitech wired
    Mouse
    Logitech wireless
    Internet Speed
    still too embarrassed to tell
    Browser
    Firefox
    Antivirus
    Defender
    Other Info
    System 3 is non compliant Dell 9020 i7-4770/24gb ram Win11 PRO 26200.8457
I know S mode is not for pro so mode is for microsoft to completely take over as though your using a Ipad. S mode home version was on a new machine that I worked on. Not sure why you thought it was for pro only. Garlin stated this but not sure why there has to be another xplanation
Under W10, S mode is supported on both Home and Pro.
Under W11, vendors are only allowed to ship S mode on Home systems.

But you can manually configure S mode on any custom install of W11 Home or Pro.

PC's that ship with Pro are considered to be faster than Home PC's (Pro license is incrementally more expensive than Home). So the thought is why bother shipping a "locked" Pro system, when you already paid more for it? An organization may want to do S mode as a security measure, like for a kiosk machine at a library or PC's handed out to underage students.
 

My Computer

System One

  • OS
    Windows 7
I wonder if it might just be that OA/OEM digital license in the UEFI/BIOS, same one that embeds for Home or Pro, or other edition. Imma do clean install to see and will report back.

I did eventually answer my question.

I installed a larger NVME SSD on the brand new ASUS laptop and installed W11 fresh/clean ISO (from USB) but used the Rufus trick to bypass creating online MS account. Curiously, it did not 100% respect it I had to additionally perform the /bypassnro trick which I heard had been disabled in the latest ISO, but it worked! smh

Anyway due to the embedded license binary in the BIOS, Windows SETUP automatically defaulted to Windows Home version with NO "S" mode enabled. Just regular Home. And then it activated just fine when I connected to the nets. Used the laptop for a few days before it finally transfered to new owner for their B-Day gift and it still activated A-OK.

It appears this "S" mode is not enabled or determine by any embedded BIOS licensing. The base edition like Home or Pro is determined in the embedded BIOS binary, just like 8 and 10. The S mode is configured by the OEM system/software image, not reliant or influenced by the embedded BIOS licensing. If you do fresh/clean install of Windows, you will get non-S i.e. 'regular' Windows Home, it will not restore the S mode if originally configured that way from the manufacturer.
 
Last edited by a moderator:

My Computer

System One

  • OS
    All of them
I'm a little off, Why would I want to switch out of "S" mode? after reading: "Windows 11 in S mode is designed for security and performance, exclusively for apps that are installed from the Microsoft Store.
 

My Computer

System One

  • OS
    Windows 11 25H2 (OS Build 26200.8524)
    Computer type
    Laptop
    Manufacturer/Model
    Dell
    CPU
    Processor: 11th Gen Intel(R) Core(TM) i5-1135G7 @ 2.40G
    Motherboard
    64-bit operating system Dell 0XMF7W
    Memory
    12GB
    Graphics Card(s)
    Intel R Iris R XE Graphics family
    Sound Card
    Cirrus Speakers High Definition Audio
    Monitor(s) Displays
    Generic PnP monitor
    Screen Resolution
    1920 x 1080
    Hard Drives
    NVMe 670p SSDPEKNU512GZ NVMe I NTEL 512GB
    Case
    cheap
    Mouse
    Logitech wireless mouse
    Internet Speed
    16 Mps download
    Browser
    Google Chrome
    Antivirus
    Security: Microsoft Defender & Malwarebytes Premium (with browser guard)
    Other Info
    Dell model: Inspiron 15 3511
I'm a little off, Why would I want to switch out of "S" mode? after reading: "Windows 11 in S mode is designed for security and performance, exclusively for apps that are installed from the Microsoft Store.
Many (most?) users want to be able to install apps that are not available from the Microsoft store, or perhaps use a browser other than Edge.
 

My Computer

System One

  • OS
    Windows 11
    Computer type
    Laptop
So either I take this laptop out of "S" mode - or I don't use the Smart App Control. yes/no?
 

My Computer

System One

  • OS
    Windows 11 25H2 (OS Build 26200.8524)
    Computer type
    Laptop
    Manufacturer/Model
    Dell
    CPU
    Processor: 11th Gen Intel(R) Core(TM) i5-1135G7 @ 2.40G
    Motherboard
    64-bit operating system Dell 0XMF7W
    Memory
    12GB
    Graphics Card(s)
    Intel R Iris R XE Graphics family
    Sound Card
    Cirrus Speakers High Definition Audio
    Monitor(s) Displays
    Generic PnP monitor
    Screen Resolution
    1920 x 1080
    Hard Drives
    NVMe 670p SSDPEKNU512GZ NVMe I NTEL 512GB
    Case
    cheap
    Mouse
    Logitech wireless mouse
    Internet Speed
    16 Mps download
    Browser
    Google Chrome
    Antivirus
    Security: Microsoft Defender & Malwarebytes Premium (with browser guard)
    Other Info
    Dell model: Inspiron 15 3511

Latest Support Threads

Back
Top Bottom