Skip to main content

Reverting 10X boot restrictions & returning to classic 10

Prerequisites

  • A Windows 10 Setup USB of an identical or higher version than the 10X build you've used
    • For example if you're on 10X build 20279, you'll want Windows 10 Insider Preview build 20279 or newer
  • An x64 EFI shell (click here to download)

Before you begin, make sure Secure Boot is turned off on the machine you wish to roll back to classic 10

Tweak USB contents

  • Plug in the setup USB drive
  • Navigate to efi\boot inside your USB drive
  • Rename the existing bootx64.efi file to winx64.efi
  • Copy the EFI shell file you've downloaded to that directory and rename it to bootx64.efi
  • Create a file on the root of your USB drive called startup.nsh and open it in Notepad
  • Paste this text into Notepad and save the file:
    dmpstore -d SecureBootPlatformID -guid 77FA9ABD-0359-4D32-BD60-28F4E78F784B
    fs0:\efi\boot\winx64.efi
    fs1:\efi\boot\winx64.efi
    fs2:\efi\boot\winx64.efi
    fs3:\efi\boot\winx64.efi
    fs4:\efi\boot\winx64.efi
    fs5:\efi\boot\winx64.efi
    fs6:\efi\boot\winx64.efi
    fs7:\efi\boot\winx64.efi
    fs8:\efi\boot\winx64.efi
    fs9:\efi\boot\winx64.efi
    fsA:\efi\boot\winx64.efi
    
  • The USB drive is now ready to use

Extra troubleshooting

Recent devices with Intel Pentium (Gold) chips that use Insyde BIOS are prone to entering a faulty Secure Boot state, resulting in the machine booting to a black screen with Security Boot Fail written in the middle, even though UEFI says Secure Boot is off. To fix this issue, do the following:

  • Turn Secure Boot on
  • Save changes and boot to UEFI settings again
  • Turn Secure Boot off
  • Secure Boot should now be fully disabled