Microsoft re enables bitlocker, locked my computer and deleted the windows hello pin after installing 23H2.

[mechtech]

I have a better one. I moved my MP700 to a different M2 slot and now Gamepass is asking me to reinstall Forza 8.

I removed a 32gig kit from my motherboard and put in a 64gig kit and had to use phone to recert my key.

 

[kapone32]

I removed a 32gig kit from my motherboard and put in a 64gig kit and had to use phone to recert my key.

I don't care what anyone says there are issues with the way Windows is connected to the BIOS. Some of you are lucky and don't face them. Like a drive not being recognized by the Case USB-C header but fine with the MB and then only readable by that specific Windows system so that if you move it to a new computer you see a USB drive with no Data or storage on it.

 

[cst1992]

only readable by that specific Windows system so that if you move it to a new computer you see a USB drive with no Data or storage on it.

Wouldn't that be like DRM?

 

[Denver]

Windows 11 is still in this sorry state, and is Microsoft already preparing Windows 12? So happy that win10 is compatible with everything I need Lol

 

[ThrashZone]

I don't think all OEM systems are being done like this. But who knows. It's really kinda stupid.


Right?

Hi,
Here's the one on 11forums I knew there was one

All partitions are Bitlocker on Win 11 Home SL?

Just made a clean install on a M.2 NVMe on a Samsung Book X30 It says that all data partitions are Bitlocker encrypted. - Its a Win 11 Home SL -Never set any Bitlocker encryption. What´s going on?

www.elevenforum.com

 

[Selaya]

went through three more systems (DIY, Dell Laptop and HP Laptop)
DIY is automatically disabled.
OEMs seems to get recommended by microsoft to auto enable device encryption. (was a reply on a HP forum)
and on both laptop it was auto enabled after a fresh install from my 23H2 USB Drive.
View attachment 325146

this is why i always clean install my own os; fuck that oem garbage.

 

[R-T-B]

went through three more systems (DIY, Dell Laptop and HP Laptop)
DIY is automatically disabled.
OEMs seems to get recommended by microsoft to auto enable device encryption. (was a reply on a HP forum)
and on both laptop it was auto enabled after a fresh install from my 23H2 USB Drive.
View attachment 325146

This is a SecureCore bios PC policy, as I've mentioned elsewhere.

 

[ThrashZone]

this is why i always clean install my own os; fuck that oem garbage.

Hi,
Thought it was a regular iso
Bios or online communications I thought was the issue during a clean install.

 

[Selaya]

oh interesting

 

[Deleted member 57642]

Have 2x PC and that never happened be it on Windows Install or a Major Update. Tho, one system can with Windows Home and the other had no OS. And I presume - this probably happens only on systems with Windows 10/11 Pro - who already has BL set/activated by the OEM. I don't have much experience with BL - so i base this assumption on the way Windows and OEM products - function in general, as in: you can download the Windows.iso (or use MC) from Microsoft and do a fresh install on laptop - yet this days, in most cases - you don't even have to check the OEM site for drivers - cause Windows already knows what drivers are needed - which are installed through Windows Update, even more than that - also know what "dedicated" software comes with your specific model.

For example nahimic/A-Volute - a software meant for audio enhancement. The audio card included with this laptop is a rather typical Realtek chip included with multiple other laptops - used by many other brands, and yet - not all of them come with this software. It's simply a bonus pack meant for specif laptop models. Be it on a fresh install or while uninstalling the Audio Drivers - Windows (Update chancel) knows that my model comes with this software - it even knows the exact driver (last version on the OEM site) - the exact version which works with this laptop. If i try a different or newer version (since that one is from 2020) - the Audio get partially broken on this rig. And yet, with that old driver works perfectly.

Again, it's just an aumtion - but BL might work the same way. While checking the OEM data base for your specific model - Windows knows that laptop came with BL enabled and does just that. As a workaround - you could buy a Windows Home Key and switch that.

 

[R-T-B]

As I've said repeatedly, there's really no magic to this. It's even documented. If you have a secureCore PC you WILL get this. If you don't you won't.

To date this is all OEM boxes and notebooks, mostly (but not all) business grade.

 

[Assimilator]

As I've said repeatedly, there's really no magic to this. It's even documented. If you have a secureCore PC you WILL get this. If you don't you won't.

To date this is all OEM boxes and notebooks, mostly (but not all) business grade.

Bro, this is an anti-Microsoft circlejerk. Logic isn't going to magically make their brains start working.

 

[lexluthermiester]

As I've said repeatedly, there's really no magic to this. It's even documented. If you have a secureCore PC you WILL get this. If you don't you won't.

To date this is all OEM boxes and notebooks, mostly (but not all) business grade.

I was over at BestBuy yesterday and took a look. A lot of them did have it turned on. Not all of them though. A few Dells and Asus models did not. Seems to be hit or miss. I'm sure there's some logic to which ones were, but I couldn't figure it out.

 

[ThrashZone]

I was over at BestBuy yesterday and took a look. A lot of them did have it turned on. Not all of them though. A few Dells and Asus models did not. Seems to be hit or miss. I'm sure there's some logic to which ones were, but I couldn't figure it out.

Hi,
Notice all were 23h2 ?

 

[lexluthermiester]

Hi,
Notice all were 23h2 ?

I didn't notice. Presuming most of them likely were.

 

[cst1992]

mostly (but not all) business grade

I'm inclined to believe the larger players like Dell and HP would have it turned on on all their products, home or business, just because of the volumes and to keep things simple.

Hi,
Notice all were 23h2 ?

Does that matter?

 

[ThrashZone]

I didn't notice. Presuming most of them likely were.

I'm inclined to believe the larger players like Dell and HP would have it turned on on all their products, home or business, just because of the volumes and to keep things simple.


Does that matter?

Hi,
Well so far all the posts claiming getting bitlocker turned on after is updating or clean installing 23h2 it seems like a commonality.
My acer was still on 22h2 when I turned it on 11 home BL wasn't on thankfully !

I've clean installed but cleaned the nonsense with rufus before but again 22h2 but plan would be using rufus again and mount 23h2 when or if I install AI 23h2 which I see no point in doing it atm just for more AI nonsense.

 

[cst1992]

plan would be using rufus again and mount 23h2 when or if I install AI 23h2 which I see no point in doing it atm just for more AI nonsense.

Make sure to not be connected to the Internet while installing or it overwrites the changes made by Rufus.

 

[lexluthermiester]

Hi,
Well so far all the posts claiming getting bitlocker turned on after is updating or clean installing 23h2 it seems like a commonality.
My acer was still on 22h2 when I turned it on 11 home BL wasn't on thankfully !

I've clean installed but cleaned the nonsense with rufus before but again 22h2 but plan would be using rufus again and mount 23h2 when or if I install AI 23h2 which I see no point in doing it atm just for more AI nonsense.

Wasn't at BestBuy to look at the laptops, just remembered the conversation and took a quick look.

Does that matter?

Yes. Some of the problems being reported is that the 23H2 update is turning bitlocker on.

 

[GerKNG]

this is why i always clean install my own os; fuck that oem garbage.

these were/are all clean installs. from a fresh 23H2 USB Stick.

 

[lexluthermiester]

these were/are all clean installs. from a fresh 23H2 USB Stick.

Weird. I'm not experiencing that. I have a number of 23H2 iso's setup for both GPT and MBR and none have had bitlocker on by default. It's one of the first things I go to remove(delete the service) and I would notice if it was running.

 

[GerKNG]

Weird. I'm not experiencing that. I have a number of 23H2 iso's setup for both GPT and MBR and none have had bitlocker on by default. It's one of the first things I go to remove(delete the service) and I would notice if it was running.

on OEM devices?

 

[lexluthermiester]

on OEM devices?

Not generally, no.

 

[GerKNG]

well there is the reason why you and i don't have this issue on DIY systems.
Windows seems to have vendor specific settings baked in. On HP Machines i get the omen gaming hub and HP Smart. rebooting into safe mode is locked except software like AMDCleanupUtility demands it, terminal asks you if you are sure about what you just typed in and wants double confirmations even with just writing "winget list" , diskpart or ipconfig.
On Dell Systems i have auto installing software from them, terminal is not soft blocked, safe mode is blocked without software.

but both have automatic device encryption enabled by default, always and with both W10 and W11 when you make a fresh USB Drive with the media creation tool right now.
and they don't tell you about the encryption, don't give you the key and demand that you log in into your microsoft account to upload the keys to the recovery website.

 

[xtreemchaos]

my view is and has all ways been if you want something good dont ask Microsoft because thay dont know there ass from there elbow when it comes to computing. nowa days we can get better results from viruses " i dont mean that im just being daft " but Microsoft never learns its like they build a OS and spend the next 5 years messing it up and tell us there doing us a fav.