Microsoft re enables bitlocker, locked my computer and deleted the windows hello pin after installing 23H2.

[GerKNG]

brother bought a new laptop, got his old one and wiped it.
fresh W11 Pro installation, manually disabled bitlocker and checked a couple times that it is actually disabled. (wasn't the first time i found it to be enabled again after a couple weeks)
yesterday it installed 23H2 and it restarted for like 45 minutes... now bitlocker was automatically enabled again and this time it just reset my windows hello credentials and denied access to my own fucking computer.
after finding the uploaded bitlocker key from my PC, the windows pin was reset, i couldn't log in and it required an internet connection, email verification and a new pin just to get back to the desktop.

what is wrong with this company? it's like paying rent for restricted access to my own property.
and how can i make sure that this shit stays disabled? (happened so far only on OEM devices like HP, Dell and Lenovo Laptops and not desktop DIY PCs.)

 

[Kapone33]

I have a better one. I moved my MP700 to a different M2 slot and now Gamepass is asking me to reinstall Forza 8.

 

[ThrashZone]

Hi,
IDK that's messed up and I did just clean install 22h2 on purpose
Thankfully acer did not activate bitlocker out the box.

Besides having backup/ clone system images.. :/
Personally AI just for 23h2 I'll mass
But If I do I'll mount the iso rufus produces for sure.

I have a better one. I moved my MP700 to a different M2 slot and now Gamepass is asking me to reinstall Forza 8.

I think acer has the os on the wrong m.2 slot
OS shows as disk 2 and data shows disk 1

On my z490 it's the opposite disk 1 os disk 2 data.

 

[cst1992]

I just use Rufus to burn the image to USB and disable BitLocker entirely.

 

[ThrashZone]

Hi,
Was this on 11 pro or home
I opted for a cheap pro key.

 

[cst1992]

what is wrong with this company?

Microsoft's workforce is getting progressively younger; employees leave or are poached by other companies as they get more experience and are replaced by kids fresh out of college.

Result is a "five monkeys" type situation.

 

[GerKNG]

Hi,
Was this on 11 pro or home
I opted for a cheap pro key.

Windows 11 Pro

 

[Onasi]

Since this is Pro, I assume you tried setting “Computer Configuration > Administrative Templates > Windows Components > BitLocker Drive Encryption > Removable Data Drives” to Disable in gpedit to force Windows to not use it? If not, might be the play.
Edit: Also trying “Computer Configuration -> Administrative Templates -> Windows Components – > BitLocker Drive Encryption -> Fixed Data Drives” and stopping it for using it for fixed drives, that too.

 

[ThrashZone]

Hi,
Don't insult monkeys even if it's only 5

 

[Space Lynx]

@GerKNG Pretty sure this is how my Kingston KC3000 1tb got fucked up before I did the RMA on it, bitlocker encrypted it without my permission, then I went to clean install Linux one day and the two OS's waged a war somehow, cause Linux was trying to overwrite it, and then it just all got fucked up from there I guess. No idea. BUt I RMA'd got a new drive, and Win 10 Home has been treating me good ever since, I am not upgrading my OS until 2026, fuck that noise.

 

[Kapone33]

One of the worst things about Windows 11 is how NVME drives are handled. I had a NV2 in the system and upgraded to 4 TB version. I have one of those M2 adapters and wanted to use that with the old drive. I first tried it in the Case supplied USB C slot and though it recognized the drive it said it was a CD drive. I put it into one of the USB C slots on the MB and was able to format it. With the drive formatted I tried to use it via USB on my Windows 10 machine and the drive showed up with no capacity. I took it back to the Windows 11 machine and put it back in the same USB C slot as before but the issue persisted. Even using Seagate Disk Wizard does not work as the drive is not seen as part of the array. I will probably have to reset the TPM to get the drive recognized. I never had this issue with Windows 7 or 10.

 

[cst1992]

One of the worst things about Windows 11 is how NVME drives are handled. I had a NV2 in the system and upgraded to 4 TB version. I have one of those M2 adapters and wanted to use that with the old drive. I first tried it in the Case supplied USB C slot and though it recognized the drive it said it was a CD drive. I put it into one of the USB C slots on the MB and was able to format it. With the drive formatted I tried to use it via USB on my Windows 10 machine and the drive showed up with no capacity. I took it back to the Windows 11 machine and put it back in the same USB C slot as before but the issue persisted. Even using Seagate Disk Wizard does not work as the drive is not seen as part of the array. I will probably have to reset the TPM to get the drive recognized. I never had this issue with Windows 7 or 10.

I think this is why Samsung uses their own driver, but I could be wrong.

 

[Space Lynx]

I think this is why Samsung uses their own driver, but I could be wrong.

Good to know, I might role Samsung when I upgrade to gen5 or gen6 in a few years.

 

[Vayra86]

Microsoft's workforce is getting progressively younger; employees leave or are poached by other companies as they get more experience and are replaced by kids fresh out of college.

Result is a "five monkeys" type situation.

Honestly though... this happens everywhere. Doesn't explain it.

I fulfill a senior role at my company amidst juniors, and even mediors, whatever that may be; and yes, talent / knowledge drain is a thing, but its a thing that can be managed. Surely at MS they manage that...

Hi,
Don't insult monkeys even if it's only 5

Monkeys DO beta test in the wild too...

 

[Onasi]

Honestly though... this happens everywhere. Doesn't explain it.

I fulfill a senior role at my company amidst juniors, and even mediors, whatever that may be; and yes, talent / knowledge drain is a thing, but its a thing that can be managed. Surely at MS they manage that...

Sure it can be managed. But just think, we can instead lower our spending by 0.457% and improve our quarterly forecast! Surely you can see that the choice is obvious.

 

[cst1992]

Surely at MS they manage that...

Today's MS is not the same thing as it was back in Joel Spolsky's time.

 

[Vayra86]

Sure it can be managed. But just think, we can instead lower our spending by 0.457% and improve our quarterly forecast! Surely you can see that the choice is obvious.

Today's MS is not the same thing as it was back in Joel Spolsky's time.

Do you guys understand what you're saying? And do you understand what I'm saying? Our opinions are not far apart - I just don't subscribe to the idea that in a corporate environment like this, not every move that goes to the public goes unvetted. Everything corporate does is intentional. They know we'll swallow it. They know they can get away with it. They do it.

I work at a company on national scale and even we vet, test and then test again everything. This topic is about the way Windows works wrt to authentication and security. You can be damn sure this is either intentional or such an edge case it was never picked up on.

 

[chrcoluk]

There is a group policy useful for Windows 11, to prevent automated bitlocker, if you interested I will post it.

 

[Onasi]

Do you guys understand what you're saying? And do you understand what I'm saying? Our opinions are not far apart - I just don't subscribe to the idea that in a corporate environment like this, not every move that goes to the public goes unvetted. Everything corporate does is intentional. They know we'll swallow it. They know they can get away with it. They do it.

And I do not disagree with you at all, I am just being glib about it. OF COURSE they think, nay, know that whatever they do, however low their level of QC drops, the public will absolutely swallow it. They are a de-facto monopoly in the space of desktop PC OS. Both in the home and in the business world. They assume, perhaps rightly, that they are in a position where they can do practically whatever. And, unless Rapture comes and the “Year of Linux Desktop is next year” stops being a sad meme, this doesn’t look to change.

 

[ThrashZone]

There is a group policy useful for Windows 11, to prevent automated bitlocker, if you interested I will post it.

Hi,
Yeah I'm not seeing anything about disabling bitlocker here ? @W1zzard

Windows 11 Tweaks for GPU Benchmark

Updated for 24H2 Install without Internet When it prompts you to go online, press Shift+F10 and type "OOBE\BYPASSNRO" (that's an o not a zero at the end). After the automatic reboot you can install without network Install on systems without TPM, UEFI or other requirements...

www.techpowerup.com

Only this bit not sure it's the same or not ?

rem Disable automatic TCG/Opal disk locking on supported SSD drives with PSID
reg add HKLM\Software\Policies\Microsoft\Windows\EnhancedStorageDevices /v TCGSecurityActivationDisabled /t REG_DWORD /d 1 /f

Did run across this but back in April

How to prevent automatic drive encryption in Windows 11?

Not sure, if it is possible in OOBE, but disabling/removing bitlocker/EFS services should prevent it 100%. I do this post-setup: Disable decryption and decrypt, in case the disk is already encrypted. reg add "HKLM\System\CurrentControlSet\Control\BitLocker" /v "PreventDeviceEncryption" /t...

www.elevenforum.com

 

[Onasi]

I listed my suggested policies couple of comments back.

 

[ThrashZone]

I listed my suggested policies couple of comments back.

Hi,
MS rarely follows GP.

By the way I didn't read any that helped turn bl off just jumps from hardware to software usage of it.

I asked the dude on 11f and said I got E & F to if this would work and he said it should

reg add "HKLM\System\CurrentControlSet\Control\BitLocker" /v "PreventDeviceEncryption" /t REG_DWORD /d "1" /f
fsutil behavior set disableencryption 1
manage-bde -off C:
manage-bde -off D:
manage-bde -off E:
manage-bde -off F:
cipher /d /e /f /s:C:\
sc config EFS start= disabled
sc config BDESVC start= disabled

 

[AleXXX666]

One of the worst things about Windows 11 is how NVME drives are handled. I had a NV2 in the system and upgraded to 4 TB version. I have one of those M2 adapters and wanted to use that with the old drive. I first tried it in the Case supplied USB C slot and though it recognized the drive it said it was a CD drive. I put it into one of the USB C slots on the MB and was able to format it. With the drive formatted I tried to use it via USB on my Windows 10 machine and the drive showed up with no capacity. I took it back to the Windows 11 machine and put it back in the same USB C slot as before but the issue persisted. Even using Seagate Disk Wizard does not work as the drive is not seen as part of the array. I will probably have to reset the TPM to get the drive recognized. I never had this issue with Windows 7 or 10.

lol, just disable this tpm thing, it annoys me asf whenever i upgrade some cpu...

 

[ThrashZone]

lol, just disable this tpm thing, it annoys me asf whenever i upgrade some cpu...

Hi,
Not usually an option on a locked laptop sadly. I can't

 

[R-T-B]

So someone finally got bit by this. I knew auto-bitlocker encryption was going to bite someone.