Is Enabling Secure Boot Mandatory for Windows 11 Installation?
The device supports TPM 2.0 but it is not enabled. Configuring Secure Boot poses challenges as it requires completely disabling CSM compatibility mode in the BIOS. Attempting to boot in UEFI-only mode results in a black screen issue with the graphics card. Please clarify: 1. Is Secure Boot an absolute requirement for installing Windows 11? 2. How can the black screen issue with the graphics card in UEFI mode and the difficulties in configuring Secure Boot be resolved?
Secure Boot Certificate Updates via InTune Policy
We are currently having issues applying the settings required to install secure boot cert updates using the InTune policy method. A brief overview to quickly explain : We are a reasonably large company managing a mix of over 10,000 Windows and iOS devices. Our Windows devices come from the supplier with the Professional edition of Windows pre-installed, this is then changed via an Enterprise key as part of our Autopilot enrolment process and activated via our users subscription license. To all sense and purposes Windows looks and feels like the Enterprise edition, indeed if you check using winver, system settings and activation status for example then Windows tells us that it is the Enterprise edition. However, if you check the licensing using slmgr /dli it shows that the licensing has been reverted back to the OEM Professional edition as pre-installed by the supplier on purchase. This may have always been the case but until very recently has gone unnoticed. Whilst testing the rollout of an InTune policy to allow secure boot cert updates as detailed here : Microsoft Intune method of Secure Boot for Windows devices with IT-managed updates - Microsoft Support , this is failing because the policy is rejected by licensing error : MDM PolicyManager: Policy is rejected by licensing, Policy: (ConfigureMicrosoftUpdateManagedOptIn), Area: (SecureBoot), Result:(0x82B00006) Unknown Win32 Error code: 0x82b00006 InTune reporting directly on the policy shows this as error 65000 We are able to change the key by using slmgr and a combination of MAK\KMS\OEM but whatever keys are applied this always reverts to being the OEM Professional key after the device has been restarted. I have seen that there is a group policy method for setting the required settings for the secure boot cert updates to work, this however seems a very backward approach by Microsoft in an area where they are trying to promote a cloud-first policy. Indeed since we rolled out Windows 11, we as an organisation have been moving anything that we can to cloud in readiness for retirement of our on-prem estate. Microsoft's response to my recent support request was that this is expected behaviour, which to all sense and purposes is not what i would class as a solution. Has anyone else had the same issues when using the InTune policy method, and was a solution found or did you have to return to the dark ages and resort to group policy? There seem to be lots of posts online referring to access to specific registry keys being blocked going as far back as 2024, the suggested script to resolve these permissions and suggested KB articles have not resolved the issue.
How to escalate support issues.
I have an issue with Microsoft's Backup and Restore and File History on Windows 11. Specifically, the shadow copy space is empty and set to 1GB, but the error complains that the shadow space is full or too small. (I've run through every support article available) This was all working fine (on Win 11) until a couple of weeks ago. However, the support chat claims this is 3rd-party software and that Windows 7 backups cannot be restored to Windows 11, which has nothing to do with the issue at hand. The machine has never had Windows 7 installed, but the support agent insists that Windows 7 is unsupported, and hence, I'm using 3rd-party software and will not transfer me to anyone else, and no longer responds. The agent's reasoning just doesn't make sense to me. Is there any way to raise a support issue for Windows 11 or its components? This reminds me of trying to install Windows Vista; although it was a forced upgrade that failed, the support agent just insisted Microsoft Vista wasn't Microsoft software.
Windows 11 Home to Pro - Azure
Hi All, We mistakenly purchased a PC with Windows 11 Home license. We use M365 and with all our Windows 10 Pro PCs, we can set up using an Azure account for work. What options do we have to upgrade to 11 Pro? PC hasn't been touched yet, as I'm aware there are issues with purchasing an upgrade through the store as it will be linked to the personal account logged in with and not an Azure account. Any advice appreciated. Thanks.
The Windows 11 login screen lacks a password field and displays a password error.
The Windows login screen fails to display the password input field. After clicking “Login,” it prompts that the password is incorrect (though the actual password is correct), preventing access to the system. Seeking an effective solution.
Has the Power Mode Quick-Switch Slider Disappeared in Windows 11?
Previously, users could quickly switch power modes (which directly affect CPU TDP settings) via a slider in the taskbar's right-click menu. However, after a Windows 11 update, the slider has disappeared, requiring full access to the settings menu for each adjustment. For devices like the ThinkPad X13, which are not gaming laptops and lack dedicated power management tools from the manufacturer, this has made efficient switching inconvenient. We request the restoration of the quick-access slider or the provision of an alternative fast-switching solution.Windows 11 account issues: lock screen skipped, device not showing in Microsoft account
Hi everyone, I’m facing a few strange issues on Windows 11 that seem to be limited only to my main user profile, and I’m hoping to fix them without creating a new profile and migrating all my data. Settings > Apps > Advanced app settings: I see a sign-in-related issue & an error code 0x80860010. The lock screen is skipped when the PC starts. On power-on or restart, the lock screen flashes for a split second, and then Windows directly goes to the PIN entry screen. This happens only on my main user account. If I create a new local or Microsoft account, the lock screen works perfectly even after a restart or cold boot. My Windows PC does not appear under Devices on my Microsoft account page, even though the PC is signed in with my Microsoft account locally. I’ve already tried restarting, signing out and back into my Microsoft account, checking sign-in options, and testing Fast Startup on and off. Since everything works fine on newly created accounts, I believe my existing user profile or account state may be corrupted. I’m trying to avoid creating a new profile and manually migrating data if possible. Any guidance on repairing the current user profile, re-linking the device to my Microsoft account, or restoring normal lock screen behavior would be greatly appreciated. Thanks in advance for any help. ~GouravSave the date: Windows Office Hours - January 15, 2026
Join us for our next monthly Windows Office Hours, January 15, from 8:00-9:00 AM PT! We will have a broad group of product experts, servicing experts, and engineers representing Windows, Microsoft Intune, Configuration Manager, Windows 365, Windows Autopilot, security, public sector, FastTrack, and more. They will be standing by -- in chat -- to provide guidance, discuss strategies and tactics, and, of course, answer any specific questions you may have. For more details about how Windows Office Hours works, go to our Windows IT Pro Blog. If you can't make it at 8:00 a.m. Pacific Time, post your questions on the Windows Office Hours: January 15th event page, up to 2 days in advance.
