Hmm... Maybe it is another feature I'm thinking of. I do remember a few people mentioning they weren't getting auto updates in Win10 after secure boot was turned off. And I thought i read the same recently about Win11 device encryption on the Microsoft website - regardless of secure boot status...
"Windows Automatic Update (WAU) does not have these requirements."
Really? I read something on the Microsoft site that said or implied otherwise. Maybe that was another OEM customization.
"Disabling Secure Boot in the UEFI settings can indeed trigger Device Encryption to enter recovery mode...
Yes, I know there are ways to recover the encrypted drive. I just mean in an "If all else fails" scenario for some reason. Microsoft account can be deactivated for a number of reasons, and backup files could be stored on physical media which have failed. Or the backup files could be stored on a...
If you're using it for backups, you wouldn't want a drive that is locked because you dont have the recovery key anymore. Lock it in a safe. Nothing beats real security.
I have an ASUS. It automatically updates the BIOS from Windows update or MyASUS. But you can use a FAT32 USB if you wish. I had to format my SD cards with a third party utility though, because Windows won't format drives or partitions over a certain size as FAT32.
It is more complicated than that.
But basically in a nutshell - yes.
If you try to boot up up a Linux distro or other OS that isn't signed by Microsoft (or one of their emissaries) it will not boot. And that's just OSes installed on a fixed disk. Supposedly you can boot unsigned efi files...
I thought bitlocker advanced features were only available in Win11 pro. And I thought that also meant that the ability to lockout due to secure boot policy changing for example, was only available in Win11 pro as well. I'm getting different information on why this happens. I'm told it's actually...
So Bitlocker and Device encryption are two different things - that do the same thing? According to Microsoft, device encryption encrypts any fixed disk when it's turned on, but unlike Bitlocker, it is available on more editions.
That doesn't make any sense to me for Pro and above. If they are...
OK double post I know, I can't edit it anymore. I pasted the wrong link.
Here's the correct one - Secure boot, and its interaction with Windows 11 security, other features
Hi.
I asked about this on Microsoft answers - Device protection in Windows Security - Microsoft Support
Didn't get many answers, thought I would ask here.
I will copy paste the question
Hi.
I have a Windows 11 Home laptop, an ASUS ROG Strix G18.
Im pretty experienced with PCs and their...
I have Win11 Home, and I was about to ask the same things.
I know on pro editions of Win10 you had bitlocker for full drive encryption, but what does that mean for those editions of Win11? Does device encryption need to be on and signed in to a microsoft account to activate bitlocker? My Win11...