Why I get setup your windows 11 screen ?

William654 · Aug 4, 2023

I installed my Win 11 Pro from several years and its current version is 22621.2070 but when I restared I got screen likt his one:

Why ?

riffwraith · Aug 4, 2023

Funny - tho I have not seen this on my W11 (umm... yet?) laptop, I do see it from time to time on my W10 laptop, and it happened again today. I was going to post in the tenforum asking why... I will follow this thread and wait for a good solution - hopefully that will apply to 10 as well.

So yes - WHY? :)

San Martino · Aug 4, 2023

MS is just trying to get you to make Edge your primary browser.

I get that screen every month after their update. Just click remind me later.

Bree · Aug 4, 2023

William654 said:
Why ?

riffwraith said:
yes - WHY? :)

Tun off all these, especially the 'Suggest ways....' one.

Windows 11:

Windows 10:

riffwraith · Aug 4, 2023

Thanks Bree

So, I just went and disabled that in W11, but it's already unchecked in W10

William654 · Aug 4, 2023

Bree said:
Tun off all these, especially the 'Suggest ways....' one.

I disabled this. Thanks

Ghot · Aug 4, 2023

This is a Setting we desperately need...

William654 · Aug 4, 2023

riffwraith said:
but it's already unchecked in W10

Maybe it will work in W11

William654 · Aug 4, 2023

Ghot said:
This is a Setting we desperately need...

This may cause more BSODs, We have to say yes to everything Microsoft want to get less BSOD.

Winuser · Aug 5, 2023

William654 said:
This may cause more BSODs, We have to say yes to everything Microsoft want to get less BSOD.

And as if that's isn't bad enough, now they want to control the Bios on our systems with a one-way update. All in the name of Security.

Winuser · Aug 5, 2023

@William654, here is one link to show what MS is getting ready to do. Additional guidance for devices using Secure Boot to address CVE-2023-24932

William654 · Aug 5, 2023

Winuser said:
@William654, here is one link to show what MS is getting ready to do. Additional guidance for devices using Secure Boot to address CVE-2023-24932

After I got so many headaches from booting I won't touch any settings

WAI · Aug 5, 2023

This screen happened on a feature update I assume if I can remember. Ignoring yes but I just click next and close it

Bree · Aug 5, 2023

Winuser said:
here is one link to show what MS is getting ready to do.

No one has complained any of the previous times. This is just the latest in a series of updates to the secure boot revocation list.

"Security update for Secure Boot DBX" - Google Search

What makes this one different is its scope. It revokes all previous Microsoft products, their bootable install media, any WinPE or WinRE boot USBs you may have made, even the Windows OS itself (after the revocations are applied if you restore an image made before the May 9th update it won't boot with secure boot turned on).

Winuser · Aug 5, 2023

Bree said:
No one has complained any of the previous times. This is just the latest in a series of updates to the secure boot revocation list.

"Security update for Secure Boot DBX" - Google Search

What makes this one different is its scope. It revokes all previous Microsoft products, their bootable install media, any WinPE or WinRE boot USBs you may have made, even the Windows OS itself (after the revocations are applied if you restore an image made before the May 9th update it won't boot with secure boot turned on).

I've been outside mowing grass in the heat so I may have linked to the wrong thread. I'm still not done. If it is the correct thread or not, there is going to be an update that is going to be (in my words) forced on us by the end of the year that is going to change the Bios/UEFI and we won't be able to remove it. I'm to burned out find a exact link to where it is stated that the update can't be undone.

Bree · Aug 5, 2023

Winuser said:
If it is the correct thread or not, there is going to be an update that is going to be (in my words) forced on us by the end of the year that is going to change the Bios/UEFI and we won't be able to remove it.

Yes, that was the correct thread. MS are going to update the DBX revocation list in the bios, not this year but tentatively scheduled for early next year.

The UEFI Forbidden List (DBX) is used to block untrusted modules from loading. As I said, this is nothing new and DBX updates have been applied by MS updates before. Up until now those untrusted modules (ie. bootable OS's) had almost always been 3rd party software. This time is different in that MS are declaring all of their own older OS and bootable media as untrusted, it will no longer boot with secure boot turned on.

This apparently draconian step is necessary to protect a PC from the BlackLotus UEFI bootkit. MS say in the linked article in that thread that: "This article applies to customers who should take additional steps to implement security mitigations for a publicly disclosed Secure Boot bypass leveraged by the BlackLotus UEFI bootkit which requires physical or administrative access to the device.

Caution: Once the mitigation for this issue is enabled on a device, meaning the revocations have been applied, it cannot be reverted if you continue to use Secure Boot on that device."

At the moment the revocations have been delivered in the May 9th update, but not installed in the bios. MS intend to enforce updating the bios early in 2024. What will not be enforced it that you have to have secure boot turned on, you will always be able to boot from anything by turning it off.

Microsoft: "The final enforcement phase that will make the mitigations permanent. Tentatively scheduled for the first quarter of 2024."

The MS article describes how you can manually apply the revocations to the bios now if you wish to test the consequences. If you choose to do so this is irreversible. I have done so on one of my machines, the effects are not as bad as you might imagine.

Winuser · Aug 5, 2023

Bree said:
Caution: Once the mitigation for this issue is enabled on a device, meaning the revocations have been applied, it cannot be reverted if you continue to use Secure Boot on that device."

The can't be reverted part is what bothers me. MS owns the Windows software. They do not own the hardware and any changes to the hardware shoud be voluntary.

Why I get setup your windows 11 screen ?

Well-known member

My Computer

Well-known member

My Computer

Well-known member

My Computer

Well-known member

My Computers

Well-known member

My Computer

Well-known member

My Computer

Well-known member

My Computers

Well-known member

My Computer

Well-known member

My Computer

Well-known member

My Computers

Well-known member

My Computers

Well-known member

My Computer

Well-known member

My Computers

Well-known member

My Computers

Well-known member

My Computers

Well-known member

My Computers

Well-known member

My Computers

Similar threads