How serious is MS about requiring TPM? I haven't read too much into it but every time I hear people talking about it they say there will be workarounds or MS will eventually budge. The same with requiring online accounts.
"But how did you solve the TPM requirement?"
"I just bought a cheap TPM module from dubious Amazon market place. I cannot examine this piece of additional device so this system is less secure in my opinion."
"Microsoft Defender SmartScreen prevented an unrecognised app from starting. Running this app might put your PC at risk."
I've switched off Defender. Still the same.
The tool is sound. Unless your company explicitly disallow it, you should be able to bypass defender and force it to install, although there are some dark patterns there that may not make it obvious.
The author of the tool is aware of the problem, from the github page:
_N.B. A few antivirus programs incorrectly flag Policy Plus as malware. Policy Plus is a powerful tool and so may cause problems if used recklessly, but it is not malicious. If you would prefer to not trust binaries, feel free to read the code and compile Policy Plus from source. You can also verify that a build was created from the published code by examining the output of a GitHub Actions run: the input commit hash can be found under "checkout master" and the output executable hash can be found under "compute hash."_