Pure_RaverBut if u do you're absolutely screwed. No matter how many people were affected the point is to start testing updates before release and not treating your clients as beta testers saying politely.

How exactly ARE YOU SCREWED? if you set up the policy manually, you should know your OWN bitlocker password, wouldn't you ? These hyperbole outrage are so dumb.

razzaQHow exactly ARE YOU SCREWED? if you set up the policy manually, you should know your OWN bitlocker password, wouldn't you ? These hyperbole outrage are so dumb.

We've seen issues getting our machines to take the bitlocker key or boot successfully after activation. Only solution at that point is to blow the thing away.

Here's a better idea, MS should stop breaking the thing.

lexluthermiesterIt hasn't always been that way. Until they figure out how to reinvest in their own OS with actual human programmers that know how to program AND find flaws in that programing, this nonsense will continue.

Well it was, but that was back when the old heads were still around. Intune/Entra have been nothing but trouble since we adopted them and I have no faith tha tMS is gonna fix any of this going forward. Too many contractors being swapped out to properly support their software these days.

TheinsanegamerNI have no faith tha tMS is gonna fix any of this going forward.

What's really sad is that you might full-well be correct.

IhnakoWhat else would you use to prevent a 3'rd part to read/steal your data in the event that the device/drive got missing/stolen?

Nothing because most people in general don't keep anything that requires encryption in the first place
Oh No someone's stolen my HDD whatever will I do without all my cat videos and photos

AthloniteNothing because most people in general don't keep anything that requires encryption in the first place
Oh No someone's stolen my HDD whatever will I do without all my cat videos and photos

It’s tempting not to respond to your remark, but BitLocker isn’t really intended for home users who worry that their cat videos might be stolen by third parties; rather, it’s aimed at businesses and institutions.
In that regard, I wouldn’t judge anyone for choosing not to use BitLocker on their personal computer—where there’s nothing worth protecting besides those cat videos—or even for relying on a specialized solution from another provider.
And even in a corporate environment, it can make sense to rely on third-party solutions, especially if you either don’t trust the in-house Microsoft solution or if various loopholes had to be built in because, for example, a government might have a potentially legitimate interest in accessing certain data.

Ihnakobut BitLocker isn’t really intended for home users who worry that their cat videos might be stolen by third parties; rather, it’s aimed at businesses and institutions.

Then why is microsoft attempting to force it on "home users"?

IhnakoAnd even in a corporate environment, it can make sense to rely on third-party solutions, especially if you either don’t trust the in-house Microsoft solution or if various loopholes had to be built in because, for example, a government might have a potentially legitimate interest in accessing certain data.

Well there's a thought..

I guess MS just wants all businesses to ditch their OS and go with Linux instead

They have had so many regressions that it isn't even funny anymore, and they keep saying "sorry", but it's pretty obvious that it's just a smoke screen or they would hire a ton more QC people and not leave it up to the cheapest bidder

"It has been a while since one of Microsoft's Windows 11 updates wreaked havoc"

love the humour, crocodile

AthenaI guess MS just wants all businesses to ditch their OS and go with Linux instead

Right? It's almost like they're doing it deliberately.

lexluthermiesterIt hasn't always been that way. Until they figure out how to reinvest in their own OS with actual human programmers that know how to program AND find flaws in that programing, this nonsense will continue.

yeah the thing with AI is it generates sloppy code fast, which is fine, if you have the ability to fully test it/not running tons of dependencies - microsoft does not have the ability to fully test anything - and they've relied on the foresight/resilient design by human engineers to prevent issues.

letting early gen plinko machine AI start coding on their stack was a massive strategic mistake for them.

IhnakoThen name it and how to implement/deploy them on a wide/global scale.

VeraCrypt for one. But Bitlocker is completely fine as long as you don't lose your recovery key like I did. Heh.

theonlyrobertVeraCrypt for one. But Bitlocker is completely fine as long as you don't lose your recovery key like I did. Heh.

Veracrypt is the better solution, by far. Bestcrypt, very similar but distinctly different form of FDE/FPE/FVE. Diskcryptor is also excellent and like VeraCrypt, open source, though it is still in beta currently.

lexluthermiesterVeracrypt is the better solution, by far. Bestcrypt, very similar but distinctly different form of FDE/FPE/FVE. Diskcryptor is also excellent and like VeraCrypt, open source, though it is still in beta currently.

I'm a noob, what makes VeraCrypt far better than Bitlocker?

theonlyrobertI'm a noob, what makes VeraCrypt far better than Bitlocker?

It's not paid, it's not made by microsoft, it's been independently tested for vulnerabilities and is open source so all future versions can also tested. BestCrypt is not open source, however, Jetico has vested interest in keeping it secure for many reasons. They're also still using human programmers, much like VeraCrypt.

Not surprised, I’m just annoyed

ReavheavyNot surprised, I’m just annoyed

Welcome to the party, pal!

It's happened again...

What bothers me the most is that they shamelessly promised, fingers crossed behind their back, that they would 'focus on improving the core functions of Windows', to generously paraphrase, only to (as far as I can tell) stay the course and continue pushing low-quality updates that they will turn around and blame on the end user for having this or that esoteric configuration that is built into the operating system. It's practices like this that get people to swear off of Windows at the individual scale. I can only imagine the havoc preceding and proceeding a business deciding it might be best to switch to Ubuntu or RHEL.

lexluthermiesterI have a, arguably, better workaround.... DON'T use bitlocker!

This the best solution.

fun fact bitlocker is enabled BY DEFAULT on newer computers...

wiakfun fact bitlocker is enabled BY DEFAULT on newer computers...

Yeah, covered that earlier. It can still be disabled.

I wonder how long it takes until after some update Bitlocker "accidentally" asks credit card number or something like that to "verify user" before unlocking drive...

Athena...or they would hire a ton more QC people...

More?
They haven't had any real QC department in long time.
www.theregister.com/2018/10/23/microsoft_windows_10_crisis

IhnakoAnd even in a corporate environment, it can make sense to rely on third-party solutions, especially if you either don’t trust the in-house Microsoft solution or if various loopholes had to be built in because, for example, a government might have a potentially legitimate interest in accessing certain data.

In case of being worried about government spying, why is certain government so happy to allow MS to push BitLocker automatically to every single PC everwhere on planet?

EsaTIn case of being worried about government spying, why is certain government so happy to allow MS to push BitLocker automatically to every single PC everwhere on planet?

False sense of security. There isn't a person easier to deceive that one that's convinced they cannot be deceived and governments like people to be secure but not so secure it prevents them from getting what they want. BTW this isn't limited to disk encryption. VPNs fall in the same category: excellent tools to put all your internet traffic in the hands of an intelligence agency.

razzaQHow exactly ARE YOU SCREWED? if you set up the policy manually, you should know your OWN bitlocker password, wouldn't you ? These hyperbole outrage are so dumb.

That sounds like whataboutism. ask those million posts i ignored on purpose which included micorsoft + bitlocker + can not log in

i see several posts a day on reddit and i ignore those.

that stuff auto activates itself and the user is not informed. i bought on purpose a refurbished notebook with official microsoft refurbisher microsoft windows 11 pro license. i did not reistnall as most "i know better guys" recommend. out of the box experience. bitlocker is active and activated, even when you try to make a local user account which gets harder and harder with each passing month. you have it on c: and it is wrongly shown. I speculate just a windows update triggers it and you are screwed. i repeat it, even when you deactivate bitlocker, it is still active. you need hacky shell commands to get rid of it, and not one, several commands and also commands to verify. explorer was broken to show the real facts about bitlocker state. you need wacky shell commands which are hard to find to turn off something whcih should be able to disable by the user with the windows explorer.

the default path is, people have to use a microsoft outlook address to use windows 11. i do not bother with that, but it is most likely you can get the recovery key via that online website which mcirsoft has set up for that.

it is about the recovery key which most likely no one has / print out / knows that it exists in the first place.

i'm sure when you read 30 to 50 posts you may see a pattern why it happens. i m not interested in those. i did read a lot of those burned graphic card connectors and dead ryzen cpus posts because those are interesting to me with an electronics background.

-- I have 5 keys set for my encryption. Can windows do that? As far as i know nope.

IhnakoIt’s tempting not to respond to your remark, but BitLocker isn’t really intended for home users who worry that their cat videos might be stolen by third parties;

I doubt windows installs these days without bitchlocker by default when you use a microsoft email address to log in. that would not be smart to leak customer passwords, amazon password, email passwords, etc to anyone who gets the datadrive by default. script kiddies even know about how to decode the google chrome password store, a youngster at a company showed it to me in a few seconds several years ago.

ahynthing which contains emails or where you do ebanking or shopping should be encrypted.

AthloniteNothing because most people in general don't keep anything that requires encryption in the first place

as long as you do not log in any accounts i agree. that includes also gmail webemail in a browser.

--

edit: Feel free to educate me how you can get the bitlocker recovery key when you are a windows 11 home / home oem user with a email address login and the default bitlocker active.

reddit is also full with what lex said, failed mfa wrong stuff to recover an account. i do not bother reading or getting the details. customer fault not to know every loophole / have backups / etc.

razzaQHow exactly ARE YOU SCREWED? if you set up the policy manually, you should know your OWN bitlocker password, wouldn't you ? These hyperbole outrage are so dumb.

The general problem with bitlocker is most people don't knowingly use it. use a microsoft account when creating their pc, never really use that account.
Device gets auto encrypted with bitlocker using the tpm and the microsoft account for recovery. At some point something breaks and the account used is long-forgotten, after all got no other uses for that account.
And so you get locked out.

This is a common problem repair shops are facing.

lexluthermiesterDON'T use bitlocker!

You mean that new old feature from Windows Vista? Who's stupid enough to actually use that?

_roman_you can see the bitchloker key also on a webpage from microsoft.

Security-relevant information has no place online. That's not only negligent, but also stupid.
Yes, the key is only stored online when "needed".

Surveillance: Microsoft secretly handed over BitLocker keys to the FBI
ComputerBase (de)

yfn_ratchetI can only imagine the havoc preceding and proceeding a business deciding it might be best to switch to Ubuntu or RHEL.

La Grande Linux Nation: France relies on the free operating system
ComputerBase (de)

I personally think that's right and important. And let's see if the rest of Europe follows suit. That would be great.

Regards,
Fred.

I know it will trigger a lot of people but hear me out.
Why do you think most EU citizens don’t have a problem with BitLocker, the Microsoft Account requirement, or whatever that spy tool was called that takes a screenshot of your screen every few seconds?

21 - 22 - 23 - Exactly, the magic word is “opt-in,” not “opt-out” like in the U.S., for example.

It would already help many people if the issue of data protection and consumer rights were given greater attention, but all too often, convenience wins out.

And yes, anyone who calls for alternatives, brings up Linux, and then says, “But XYZ doesn’t work there,” is part of the problem. Without a sufficiently large number of users, an alternative to Windows—or (God forbid) a user-friendly, secure, and above all streamlined operating system—will be a long time coming.