Reverting 10X boot restrictions & returning to classic 10
Prerequisites
- Windows 10 Setup USB of an identical or higher version than the 10X build you've used
- For example if you're on 10X build 20279, you'll want Windows 10 Insider Preview build 20279 or newer
- An x64 EFI shell (click here to download)
- Secure Boot off on the machine you wish to roll back to classic 10
Tweak USB contents
- Plug in the setup USB drive
- Navigate to
efi\boot
inside your USB drive - Rename the existing
bootx64.efi
file towinx64.efi
- Copy the EFI shell file you've downloaded to that directory and rename it to
bootx64.efi
- Create a file on the root of your USB drive called
startup.nsh
and open it in Notepad - Paste this text into Notepad and save the file:
dmpstore -d SecureBootPlatformID -guid 77FA9ABD-0359-4D32-BD60-28F4E78F784B fs0:\efi\boot\winx64.efi fs1:\efi\boot\winx64.efi fs2:\efi\boot\winx64.efi fs3:\efi\boot\winx64.efi fs4:\efi\boot\winx64.efi fs5:\efi\boot\winx64.efi fs6:\efi\boot\winx64.efi fs7:\efi\boot\winx64.efi fs8:\efi\boot\winx64.efi fs9:\efi\boot\winx64.efi fsA:\efi\boot\winx64.efi
- The USB drive is now ready to use
Extra troubleshooting
Recent devices with Intel Pentium (Gold) chips that use Insyde BIOS are prone to entering a faulty Secure Boot state, resulting in the machine booting to a black screen with Security Boot Fail
written in the middle, even though UEFI says Secure Boot is off. To fix this issue, do the following:
- Turn Secure Boot on
- Save changes and boot to UEFI settings again
- Turn Secure Boot off
- Secure Boot should now be fully disabled
again