Windows 11 Bitlocker?

[ThrashZone]

Hi,
Read some wild stuff about bitlocker on 11 and in general on past 10 & 8 I suppose was referred to
But someone posted this script he uses to disable bitlocker
Well I wasn't expecting how much it would decrypt lol but reading the code I guess not
Any input @W1zzard

fsutil behavior set disableencryption 1
cipher /d /s:C:\
reg add "HKLM\Software\Policies\Microsoft\Windows\EnhancedStorageDevices" /v "TCGSecurityActivationDisabled" /t REG_DWORD /d "1" /f
sc config BDESVC start= disabled
sc config "EFS" start= disabled

 

[W1zzard]

Hmm.. what issues have you been seeing?

TCGSecurityActivationDisabled is useful without Bitlocker, too. It makes sure that Windows doesn't activate TCG/Opal encryption on SSDs that support it. I have that as standard part of my setup scripts

The rest seems to just disable disk encryption, the related services

 

[ThrashZone]

Hi,
Here is the reply that started this since you made a thread about it might as well have it here too

I have learnt my lesson about MS, as soon as I install Windows, disabling this junk is part of my routine:

fsutil behavior set disableencryption 1
cipher /d /s:C:\
reg add "HKLM\Software\Policies\Microsoft\Windows\EnhancedStorageDevices" /v "TCGSecurityActivationDisabled" /t REG_DWORD /d "1" /f
sc config BDESVC start= disabled
sc config "EFS" start= disabled

What is the point of the whole disk encryption? I encrypt important files, more than once actually.

LoL, that is like jumping out of a plane and then finding out, that they forgot to give you a parachute.
Encryption is a double edge sword, just like 2FA, once you are locked out, your life can be ruined, literally.
I have seen people loosing jobs, diploma, even family photos, because of those. And there are worse cases.

Since I really don't know much about bitlocker besides some rude basics and I never want it to work
Only issue was my surprise what the script decrypted I was not expecting it

So question is did I mess up any system files seeing it decrypted quiet a few ?

 

[R-T-B]

I don't think disk encryption is on by default. They certainly aren't on mine. This would just shut down the services to provide it someday.

 

[ThrashZone]

Hi,
Try the script the decrypt is a mile long lol

Hmm.. what issues have you been seeing?

TCGSecurityActivationDisabled is useful without Bitlocker, too. It makes sure that Windows doesn't activate TCG/Opal encryption on SSDs that support it. I have that as standard part of my setup scripts

The rest seems to just disable disk encryption, the related services

Is it on this list ?

Windows 10 Tweaks for VGA Benchmark

Updated for Windows 10 21H2 Update - Install without Internet, so you can create an offline user - name the user "TPU" (the user will be deleted at the end of the scripts and you're using "Administrator") - Install VGA driver, from USB, still without network, so Windows Update won't install a...

www.techpowerup.com

 

[W1zzard]

Hi,
Try the script the decrypt is a mile long lol


Is it on this list ?

Windows 10 Tweaks for VGA Benchmark

Updated for Windows 10 21H2 Update - Install without Internet, so you can create an offline user - name the user "TPU" (the user will be deleted at the end of the scripts and you're using "Administrator") - Install VGA driver, from USB, still without network, so Windows Update won't install a...

www.techpowerup.com

Yeah, Ctrl+F, "TCG"

 

[R-T-B]

Hi,
Try the script the decrypt is a mile long lol

Yeah, not seeing that here.

Maybe it's because my SSDs are using their opal managed hardware encryption, no idea.

 

[ThrashZone]

Yeah, not seeing that here.

Maybe it's because my SSDs are using their opal managed hardware encryption, no idea.

Hi,
Using win-11 ?
The above comment was referring to win-11 not 10 but I may use it shortly on 10

Yep did the same thing on 10

rem Disable automatic TCG/Opal disk locking on supported SSD drives with PSID
reg add HKLM\Software\Policies\Microsoft\Windows\EnhancedStorageDevices /v TCGSecurityActivationDisabled /t REG_DWORD /d 1 /f

 

[R-T-B]

Hi,
Using win-11 ?
The above comment was referring to win-11 not 10 but I may use it shortly on 10

Yep did the same thing on 10

rem Disable automatic TCG/Opal disk locking on supported SSD drives with PSID
reg add HKLM\Software\Policies\Microsoft\Windows\EnhancedStorageDevices /v TCGSecurityActivationDisabled /t REG_DWORD /d 1 /f

Yeah I was on 11. You using an SSD? It's well known that bitlocker takes ownership of opal compliant ssds at install time if not already claimed, might be what you are seeing.