How to Turn Off the Ventoy Windows 11 Bypass for a Normal Supported Install
The same technician stick you use for old PCs also installs Windows on brand-new, fully supported machines — and there, you may want Setup to behave completely normally. Turning Ventoy's bypass off is easy, but it has one trap that catches almost everyone.
✍️ Technical Anshu🪟 Windows 11⏱️ 6 minute read
🎥 The bypass in action is in the video — this page is about cleanly switching it back off
Why switch it off at all? Fair reasons exist: you are installing on a customer's supported PC and want the genuine hardware verification, or an office machine that must go through the standard Microsoft account setup as policy requires. Whatever the reason, remember how Ventoy thinks: the bypass defaults are ON (since version 1.0.86), and a config file can only override a default by naming a value explicitly.
👆 Off means an explicit 0 — both lines, written by VentoyPlugson or by hand (file content recreated exactly)
1
The Trap — Deleting ventoy.json Does NOT Turn It Off
Instinct says: remove the config file, remove the behaviour. With Ventoy it is the opposite. Delete ventoy.json and the stick falls back to its built-in defaults — and the defaults have both bypasses on. Your next install on a supported PC would still skip the checks, silently. To switch a bypass off, the file must exist and must say 0.
2
Switch It Off With VentoyPlugson
Plug the stick into a Windows PC and run VentoyPlugson.exe, then click Start
Open the Global Control Plugin section
Set VTOY_WIN11_BYPASS_CHECK to 0 and VTOY_WIN11_BYPASS_NRO to 0
Save. Plugson writes the explicit zeros into ventoy.json on the stick
Boot the supported PC from the stick — Setup now runs its full hardware check and the standard Microsoft account flow, exactly like Microsoft's own media
3
Switch It Off by Hand
Open the ventoy folder on the stick's main partition and edit (or create) ventoy.json
Set the two values to "0" as shown in the panel above, keeping the JSON brackets and commas valid
Confirm the file is really named ventoy.json — not ventoy.json.txt
To turn the bypass back on later, change the zeros to ones the same way — the setting is a switch, not a one-way door
4
Nothing to Remove From an Already-Installed Windows
One reassurance: the bypass never installed anything into Windows itself. The LabConfig keys Ventoy writes live in the setup environment for that install session. A Windows that was installed with the bypass on is a normal Windows — there is no patch to hunt down or undo on the PC. Your only switch is the one on the stick.
⚠️ Honest note: the bypass setting is global to the stick — there is no per-ISO or per-PC profile. If you flip between old and new PCs daily, the practical routine is to flip the value before the job, or keep two sticks: one bypass-on technician stick, one defaults-off clean stick.
🎥 Watch the Full Ventoy Bypass Video
Bypass on karke install karna video me hai — off karna is page ka kaam hai, dono milke pura control.
Can I keep the hardware bypass on but the account bypass off?
Yes — the two values are independent. Set VTOY_WIN11_BYPASS_CHECK to 1 and VTOY_WIN11_BYPASS_NRO to 0 and you get exactly that mix: unsupported PCs install, but setup still asks for a Microsoft account as normal.
Does turning the bypass off change how my other ISOs boot?
No. These values are only read by Windows Setup. Linux, Windows 10 and rescue ISOs never looked at them in the first place.
I set 0 but the checks were still skipped. What went wrong?
Almost always the file: a hidden .txt extension, the file sitting outside the ventoy folder, or invalid JSON that Ventoy ignored (falling back to defaults — which are ON). Fix the file with VentoyPlugson, which writes it correctly by construction.
This guide is based on the Technical Anshu Ventoy Windows 11 bypass video • Stuck on a step? Ask in the video comments — you will get a reply 🙏