Secure Launch data not migrated on IceLake(Client), TigerLake, AlderLake devices (Wu Offer Block)
TLDR: GitHub Script (Please read comments): Bandaid-40667045.ps1
I've found that you need to disable System Guard, both set it to disabled and ensure it's not running. I've heard people having issues having it disable, even if they set it to disable.. you could then try to disable a pre-req in the BIOS, like TXT for example, and then try again to disable in Windows and run the upgrade. Please leave comments if you find any more info.
Safe Guard Hold Data:
Safe Guard in Registry:
I found this on my machines where I had System Guard configured and set to Enabled, but for some reason it was not running... perhaps McAfee or Symantec or other 3rd Party security disabling it...
You can see in Windows Security that it's configured, but it's Off.
I confirm in Registry, it's set to be ON
Confirmed again in MSInfo32
So I changed those registry values to 0, triggered the Microsoft Compatibility Appraiser, and the Safeguard went away.
Ok, This is NOT a long term fix, and maybe not even a fix, I'm just putting my test results out there for you to look at play with. Hopefully MS releases more info soon.
I wrote a script that checks and makes the changes for you, look at top of post for link to github.
3 thoughts on “Windows 11 Safe Guard Hold ID 40667045”
You saved the day - my device is know downloading Windows 11, version 22H2. Thanks for sharing!
Thanks! Setting Enabled to 0 was enough for me to be able to update my W11 machine to 22H2.
It looks like this hold is fixed/removed