Reverting 10X boot restrictions & returning to classic 10

Prerequisites

• Windows Setup USB containing a build equal to or higher than the 10X build you've installed
• An x64 EFI shell (click here to download)
• Secure Boot off on the machine you wish to roll back to classic 10

Tweak USB contents

• Plug in the setup USB drive
• Navigate to efi\boot inside your USB drive
• Rename bootx64.efi to winx64.efi
• Copy the EFI shell file you've downloaded to that directory and rename it to bootx64.efi
• Create a file on the root of your USB drive called startup.nsh and open it in Notepad
• Paste this text into Notepad and save the file

  dmpstore -d SecureBootPlatformID -guid 77FA9ABD-0359-4D32-BD60-28F4E78F784B
  fs0:\efi\boot\winx64.efi
  fs1:\efi\boot\winx64.efi
  fs2:\efi\boot\winx64.efi
  fs3:\efi\boot\winx64.efi
  fs4:\efi\boot\winx64.efi
  fs5:\efi\boot\winx64.efi
  fs6:\efi\boot\winx64.efi
  fs7:\efi\boot\winx64.efi
  fs8:\efi\boot\winx64.efi
  fs9:\efi\boot\winx64.efi
  fsA:\efi\boot\winx64.efi
  

• The USB drive is now ready to use

Extra troubleshooting

Recent devices with Intel Pentium (Gold) chips that use Insyde BIOS are prone to entering a faulty Secure Boot state, resulting in the machine booting to a black screen with Security Boot Fail written in the middle, even though UEFI says Secure Boot is off. To fix this issue, do the following:

• Turn Secure Boot on
• Save changes and boot back to UEFI settings
• Turn Secure Boot off
• Secure Boot should now be fully disabled again