Skip to main content

Reverting 10X boot restrictions & returning to classic 10

Prerequisites

  • Windows 10 Setup USB of an identical or higher version than the 10X build you've used
    • For example if you're on 10X build 20279, you'll want Windows 10 Insider Preview build 20279 or newer
  • An x64 EFI shell (click here to download)
  • Secure Boot off on the machine you wish to roll back to classic 10

Tweak USB contents

  • Plug in the setup USB drive
  • Navigate to efi\boot inside your USB drive
  • Rename the existing bootx64.efi file to winx64.efi
  • Copy the EFI shell file you've downloaded to that directory and rename it to bootx64.efi
  • Create a file on the root of your USB drive called startup.nsh and open it in Notepad
  • Paste this text into Notepad and save the file:
    dmpstore -d SecureBootPlatformID -guid 77FA9ABD-0359-4D32-BD60-28F4E78F784B
    fs0:\efi\boot\winx64.efi
    fs1:\efi\boot\winx64.efi
    fs2:\efi\boot\winx64.efi
    fs3:\efi\boot\winx64.efi
    fs4:\efi\boot\winx64.efi
    fs5:\efi\boot\winx64.efi
    fs6:\efi\boot\winx64.efi
    fs7:\efi\boot\winx64.efi
    fs8:\efi\boot\winx64.efi
    fs9:\efi\boot\winx64.efi
    fsA:\efi\boot\winx64.efi
    
  • The USB drive is now ready to use

Extra troubleshooting

Recent devices with Intel Pentium (Gold) chips that use Insyde BIOS are prone to entering a faulty Secure Boot state, resulting in the machine booting to a black screen with Security Boot Fail written in the middle, even though UEFI says Secure Boot is off. To fix this issue, do the following:

  • Turn Secure Boot on
  • Save changes and boot to UEFI settings again
  • Turn Secure Boot off
  • Secure Boot should now be fully disabled again