If you’re like me, you prefer keeping things simple and private when setting up a new Windows machine. But with Windows 11 25H2, Microsoft has doubled down on forcing you to create an online Microsoft account during the Out-of-Box Experience (OOBE). This will do an install to their ecosystem, enables telemetry, and just feels intrusive if you want a clean, local-only setup.
The good news? There are still reliable ways to skip this and create a local account instead. I’ve tested these on the latest 25H2 builds, and while Microsoft has patched some old tricks (BypassNRO.cmd script), the methods below work.
Note: Those method works, during the time of writing, however Microsoft can easily close those doors as well and force you to create an online account.
Method 1: Using an Unattend.xml Answer File from Schneegans Generator
This is my go-to for automated, hands-off installs. You generate a custom autounattend.xml file that tells Windows Setup to create a local admin account right from the start, skipping the online prompts entirely. It’s perfect for fresh installs on bare metal or VMs.
Here’s how to do it step by step:
1. Head to the Generator Tool: Open your browser and go to https://schneegans.de/windows/unattend-generator/. This free online tool lets you configure everything without coding.
2. Set Up Basic Install Options:
- Under “Setup settings,” pick your language (e.g., English US) and processor architecture (AMD64 for most modern PCs).
- Skip “Bypass internet” unless you’re offline— the local account config handles the bypass.
- Set a computer name (use the random script if you want something unique) and time zone.
3. Configure Disk Partitioning:
- Choose GPT for UEFI systems (standard for Windows 11).
- Let it wipe and format Disk 0, or add a custom diskpart script if you need specific partitions.
4. Create the Local Account (The Magic Part): Scroll to “User accounts.”
- Select “Let Windows Setup create the following local (‘offline’) accounts.”
- Enter your desired username (e.g., “student”), display name, and a strong password.
- Add it to the “Administrators” group for full control.
- Under “First logon,” choose this account for auto-logon after install to apply tweaks.
5. Tweak Extras if You Want:
- In “System tweaks,” disable bloat like widgets or Cortana.
- Under “Remove bloatware,” select apps to nuke (e.g., Candy Crush).
- Set privacy to “Disable all” for a lean setup.
Screenshot from schneegans.de site below
6. Generate and Prep the File:
- Hit “Download .xml file” to grab autounattend.xml.
- Download the official Windows 11 25H2 ISO from Microsoft.
- Create bootable USB media (use Rufus or the Media Creation Tool).
- Copy the XML file to the root of the USB drive (rename to autounattend.xml if needed).
7. Install:
- Boot from the USB.
- Setup runs unattended, creates your local account, and lands you on the desktop. No online nonsense.
Note: If you’re scripting this for multiple machines, add PowerShell commands in the “Run custom scripts” section for post-install automation. (Imagine the screenshot here showing the generator form filled out—clean and intuitive.)
Method 2: Enter Audit Mode with Ctrl + Shift + F3
The reboot might feel slower on first try, and final OOBE pushes harder for internet, so disconnect before step 6.
If screens differ, ensure you’re at the absolute first OOBE (country select) – earlier keypresses fizzle.
The steps:
- Start the Install: Boot your standard 25H2 USB/ISO. Language, edition, partitions—let it copy files and reboot to OOBE.
- Audit Trigger: At the initial “Let’s connect you to a network” or region screen (whichever hits first—no prior inputs), smash Ctrl + Shift + F3. Reboots straight to Audit Mode (blue banner confirms).
- Admin Login: Lands on Administrator desktop (passwordless). Hold off on apps—keep it light.
- Craft Local User:Win + X > Terminal (Admin).
- net user YourUsername YourPassword /add
- net localgroup Administrators YourUsername /add
- Tweak via lusrmgr.msc (console for managing local users/groups on the machine) if needed (e.g., no password expiry).
- Sysprep Out:
- (Admin): sysprep /generalize /oobe /shutdown
- Shuts down clean.
- Final OOBE (Key Tweak): Power up—re-enters OOBE. Disconnect internet now (unplug cable, Wi-Fi off). Skip network, hit “I don’t have internet” > “Continue with limited setup.” Your local user pops up—not forcing you to create online Microsoft account.
- Wrap Privacy: Toggle off telemetry, finish to desktop.
Example lusrmgr.msc console bellow.
Method 3: Create Bypass-Enabled Install Media with Rufus
Rufus is bulletproof for 25H2, but here’s the gotcha: You must tick both the online account bypass and the local username creator—solo bypass gets neutered in new builds. This skips funky screens altogether. If you’re seeing extra MSA nudges, it’s likely missing that second check.
The steps:
1. Prepare your tools:
- Download the Windows 11 25H2 ISO from Microsoft.
- Get Rufus (free) from rufus.ie – se version 4.4 or later.
- Plug in an 8GB+ USB drive (it’ll be wiped).
2. Launch Rufus:
- Run Rufus (no install needed).
- Select your USB under “Device.”
- Click “Select” and pick the ISO.
3. Enable Bypass Options:
- Hit “Start.”
- In the dialog, check “Remove requirement for an online Microsoft account.”
- Bonus: Check “Create a local account with username” and enter your username (e.g., “student”). This auto-sets it up – no password prompt if you skip it.
- Optionally, remove TPM/Secure Boot checks if your hardware is older.
- Click OK to confirm the wipe.
4. Build the Media:
- Rufus copies files and applies tweaks (takes 5-10 minutes).
- Eject and reinsert the USB when done.
5. Boot and Install:
- USB in, boot (any key).
- Language/keyboard > Next.
- Install > Agree > No key > Edition > Accept.
- Partitions: Wipe Drive 0 > Next > Install.
6. OOBE Flow (Simplified):
- Region/keyboard—skip extras.
- Network: If it nags, Shift + F10 > ipconfig /release to drop connection.
- “I don’t have internet” > “Continue with limited setup.”
- Your pre-set username appears—add password if wanted, security Qs, privacy toggles.
- Desktop, local and locked down.
Rufus makes this easy, especially for repeated installs. (Envision a screenshot of Rufus’s options dialog—those checkboxes are gold.)
Wrap Up
There you have it – three ways to install Windows 11 25H2 with a local account, keeping Microsoft at distance. The unattended method file is best for automation, Audit Mode for flexibility, and Rufus for simplicity. Microsoft might patch these eventually, so don’t get too excited. As I said, those methods worked during the time of writing, and might get disabled in the future. Time to go Linux?
