Skip to content
July 21, 2026
  • Linkedin
  • Twitter
  • Facebook
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
  • Cyber Criminals
  • Data Leak
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
  • Home
  • News
  • Windows
  • Microsoft Ends Local Account Bypass: Windows 11 OOBE Now Requires Microsoft Account Login
  • Windows

Microsoft Ends Local Account Bypass: Windows 11 OOBE Now Requires Microsoft Account Login

Do Son October 8, 2025 3 minutes read
0
C Windows SecureBoot folder KB5089549 Windows 11 BSOD Microsoft Windows, Rust programming WINS Service Deprecation Windows Server DNS Migration Windows Driver Standard OEM Kernel Privileges Windows Agentic OS Task Manager Bug, Windows 11 Performance Windows 11, Microsoft, WinRE, Update Bug, Tech Support Windows 11 OOBE, Microsoft Account Mandatory Windows 11, SSD failures Windows 11 Recovery, Black Screen of Death Windows 11 Update Issue, KB5062324 Windows 11, Indicator Bar

Hardware indicator for volume shown at the top center

Add Daily CyberSecurity as a preferred source on Google

Microsoft has confirmed that in the consumer editions of Windows 11 — including Home and Pro — users will no longer be able to bypass the sign-in process during the Out-of-Box Experience (OOBE) setup phase. All users must now create and log in with a Microsoft account to proceed with installation; without doing so, access to the desktop will be blocked.

All previously known methods and commands for bypassing this requirement have now been rendered ineffective. The restriction is already enforced in Windows 11 Beta Build 26120.6772 and Windows 11 Dev Build 26220.6772, and will be rolled out to the stable release channel following testing.

According to Microsoft, the decision to remove support for local account setup during OOBE is justified as follows:

“We are removing known mechanisms for creating a local account in the Windows Setup experience (OOBE). While these mechanisms were often used to bypass Microsoft account setup, they also inadvertently skip critical setup screens, potentially causing users to exit OOBE with a device that is not fully configured for use. Users will need to complete OOBE with internet and a Microsoft account, to ensure device is setup correctly.”

Microsoft further explained that while the various bypass methods were designed to skip the Microsoft account sign-in, they also unintentionally bypassed critical setup screens, potentially leading to improperly configured devices that exit OOBE prematurely.

In essence, this change aligns with Microsoft’s broader ecosystem strategy. During the OOBE process, users are prompted to enable several Microsoft services, including Microsoft 365, OneDrive, and Windows Backup — all of which require a Microsoft account for full functionality.

However, in practical terms, using a Microsoft account is not strictly necessary beyond setup. For instance, users can continue to sign in with local accounts afterward and still access Microsoft services like OneDrive or Microsoft 365 by signing in separately — without functional limitations. Thus, critics argue that removing the option to skip the login process is unnecessary.

As for local accounts, they remain possible — albeit indirectly. Microsoft clarified that users can create a local account after completing setup with an online account and reaching the desktop. Once switched, the system can continue operating under a local account, though Microsoft strongly recommends remaining signed in with a Microsoft account to ensure a “more seamless and enhanced user experience.”

Related Posts:

  • Windows 11 OOBE: Registry Hack Bypasses Microsoft Account
  • Windows 11 Adds OOBE Cloud Restore: Easier PC Setup, But Win32 Apps Still a Manual Chore
  • YouTube Music Free Tier: More Ads Are Coming – What You Need to Know

Get Zero-Hour Vulnerability Alerts

Critical CVEs, CVSS scores, and PoC updates — straight to your inbox every week.


We respect your inbox. Unsubscribe anytime.

Related coverage

  • Freedom to Reboot: Microsoft Finally Separates Windows 11 Updates from the Power Menu
  • Light Switch: New PowerToys Feature Causes Chaos in Windows 11
  • Streamlined? Microsoft Strips Critical Info from Windows Update Names, Causing IT Backlash
  • WINS is Dead: Microsoft to Fully Retire WINS Name Resolution from Windows Server Post-2025
  • Windows 11’s Black Screen of Death (BSOD) Rolls Out: Faster Reboots & Enterprise Recovery
Track all actively exploited CVEs →

Support Our Threat Intelligence

If you find our CVE report and cybersecurity news helpful, consider supporting our work.

Buy Me a Coffee Logo Buy Me a Coffee PayPal
Crypto QR Code
USDT (TRC20):
TN8BdV8cp4T1Cd28gK9qTAnZknzzuwyUtm
USDT (ERC20):
0x3725e1a7d3bc5765499fa6aaafe307fabcd75bce

Share this article:

Facebook Post LinkedIn Telegram
Written by
@DdoS · Security Researcher

Do Son

Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.

Tags: Bypass Local Account Microsoft Microsoft Account OOBE privacy Windows 11 Windows Setup

Leave a Reply Cancel reply

You must be logged in to post a comment.

Search

Translation

CVE WATCHTOWER
🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

Upgrade Package

🚨 Active Exploits in the Wild

  • CVE-2026-50522CVSS 9.8
    Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.
    Admin intel📅 Updated: Jul 21, 2026
  • CVE-2026-63030CVSS 9.8
    WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion...
    Admin intelCISA KEV📅 Added to KEV: Jul 21, 2026📅 Updated: Jul 21, 2026
  • CVE-2026-60137CVSS 5.9
    WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in parameter...
    Admin intelCISA KEV📅 Added to KEV: Jul 21, 2026📅 Updated: Jul 21, 2026
  • CVE-2026-0770CVSS 9.8
    Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability. This vulnerability allows remote attackers...
    CISA KEV📅 Added to KEV: Jul 21, 2026
  • CVE-2021-27137CVSS 8.1
    An issue was discovered in router/upnp/src/ssdp.c in DD-WRT before 45724. An unsafe strcpy in the UPnP handling functionality...
    CISA KEV📅 Added to KEV: Jul 21, 2026
  • CVE-2026-6875CVSS 9.5
    ServiceNow has addressed a remote code execution vulnerability that was identified in the ServiceNow AI platform. This vulnerability...
    Admin intel📅 Updated: Jul 18, 2026
  • CVE-2026-39808CVSS 9.8
    A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox...
    CISA KEV📅 Added to KEV: Jul 16, 2026
  • CVE-2026-25089CVSS 9.8
    A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox...
    CISA KEV📅 Added to KEV: Jul 16, 2026
Powered by CVE Watchtower

🔴 Live Critical Threats

  • CVE-2026-47413CVSS 9.6
    PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system....
  • CVE-2026-47416CVSS 9.6
    PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system....
  • CVE-2026-64877CVSS 9.6
    An authenticated non-admin user can exploit a SQL injection flaw in the...
  • CVE-2026-47410CVSS 9.8
    PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system....
  • CVE-2026-47396CVSS 9.8
    PraisonAI is a multi-agent teams system. Prior to version 4.6.40, PraisonAI's call...
  • CVE-2026-47393CVSS 9.8
    PraisonAI is a multi-agent teams system. CVE-2026-44338 (GHSA-6rmh-7xcm-cpxj) documents that PraisonAI ships...
  • CVE-2026-47392CVSS 9.9
    PraisonAI is a multi-agent teams system. Prior to version 4.6.40 of PraisonAI,...
  • CVE-2026-47391CVSS 9.8
    PraisonAI is a multi-agent teams system. Prior to version 4.6.40, PraisonAI's first-party...
  • CVE-2026-28321CVSS 9.1
    SolarWinds Serv-U is affected by a broken access control vulnerability that could...
  • CVE-2026-28317CVSS 9.1
    SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability...
Powered by CVE WATCHTOWER

Our Websites
  • Penetration Testing Tools
  • The Daily Information Technology
  • Top Exploited CVEs
  • Daily CyberSecurity

    • About SecurityOnline.info
    • Advertise with us
    • Announcement
    • Contact
    • Contributor Register
    • Login
    • Disclaimer
    • DCMA
    • Privacy Policy
    • About SecurityOnline.info
    • Advertise on SecurityOnline.info
    • Contact Us

    When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

    • CVE Watchtower
    • CVE Statistics by Vendor 2026
    • Q2 2026 Report
    • Top Exploited CVEs
    • Linkedin
    • Twitter
    • Facebook
    • Youtube
    © 2017 - 2026 Daily CyberSecurity. All Rights Reserved.