Solved All partitions are Bitlocker on Win 11 Home SL?


Megahertz

Wish to be flying
Member
VIP
Local time
6:55 AM
Posts
418
Location
Brazil
OS
Windows 7 HP 64 - Windows 11 Pro - Lubuntu
Just made a clean install on a M.2 NVMe on a Samsung Book X30
It says that all data partitions are Bitlocker encrypted.
- Its a Win 11 Home SL
-Never set any Bitlocker encryption.
What´s going on?

1701550118998.png

1701549996745.png
 

My Computers

System One System Two

  • OS
    Windows 7 HP 64 - Windows 11 Pro - Lubuntu
    Computer type
    PC/Desktop
    Manufacturer/Model
    custom build
    CPU
    i5 6600K - 800MHz to 4400MHz
    Motherboard
    GA-Z170-HD3P
    Memory
    4+4G GSkill DDR4 3000
    Graphics Card(s)
    IG - Intel 530
    Monitor(s) Displays
    Samsung 226BW
    Screen Resolution
    1680x1050
    Hard Drives
    (1) -1 SM951 – 128GB M.2 AHCI PCIe SSD drive for Win 11
    (2) -1 WD SATA 3 - 1T for Data
    (3) -1 WD SATA 3 - 1T for backup
    (4) -1 BX500 SSD - 128G for Windows 7 and Lubuntu
    PSU
    Thermaltake 450W TR2 gold
    Keyboard
    Old and good Chicony mechanical keyboard
    Mouse
    Logitech mX performance - 9 buttons (had to disable some)
    Internet Speed
    500 Mb/s
    Browser
    Firefox 64
  • Operating System
    Windows 7 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Asus Q550LF
    CPU
    i7-4500U 800- 3000MHz
    Motherboard
    Asus Q550LF
    Memory
    (4+4)G DDR3 1600
    Graphics card(s)
    IG intel 4400 + NVIDIA GeForce GT 745M
    Sound Card
    Realtek
    Monitor(s) Displays
    LG Display LP156WF4-SPH1
    Screen Resolution
    1920 x 1080
    Hard Drives
    BX500 120G SSD for Windows and programs
    & 1T HDD for data
    Internet Speed
    350 Mb/s
    Browser
    Firefox 64
Hello Luiz, :alien:

This is most likely Device Encryption instead since this is the Home edition.

It gets turned on automatically when you set up Windows with a Microsoft account.

 

My Computers

System One System Two

  • OS
    Windows 11 Pro for Workstations
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom self build
    CPU
    Intel i7-8700K 5 GHz
    Motherboard
    ASUS ROG Maximus XI Formula Z390
    Memory
    64 GB (4x16GB) G.SKILL TridentZ RGB DDR4 3600 MHz (F4-3600C18D-32GTZR)
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING (11GB GDDR5X)
    Sound Card
    Integrated Digital Audio (S/PDIF)
    Monitor(s) Displays
    2 x Samsung Odyssey G75 27"
    Screen Resolution
    2560x1440
    Hard Drives
    1TB Samsung 990 PRO M.2,
    4TB Samsung 990 PRO M.2,
    8TB WD MyCloudEX2Ultra NAS
    PSU
    Seasonic Prime Titanium 850W
    Case
    Thermaltake Core P3 wall mounted
    Cooling
    Corsair Hydro H115i
    Keyboard
    Logitech wireless K800
    Mouse
    Logitech MX Master 3
    Internet Speed
    1 Gbps Download and 35 Mbps Upload
    Browser
    Google Chrome
    Antivirus
    Microsoft Defender and Malwarebytes Premium
    Other Info
    Logitech Z625 speaker system,
    Logitech BRIO 4K Pro webcam,
    HP Color LaserJet Pro MFP M477fdn,
    APC SMART-UPS RT 1000 XL - SURT1000XLI,
    Galaxy S23 Plus phone
  • Operating System
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    HP Spectre x360 2in1 14-eu0098nr (2024)
    CPU
    Intel Core Ultra 7 155H 4.8 GHz
    Memory
    16 GB LPDDR5x-7467 MHz
    Graphics card(s)
    Integrated Intel Arc
    Sound Card
    Poly Studio
    Monitor(s) Displays
    14" 2.8K OLED multitouch
    Screen Resolution
    2880 x 1800
    Hard Drives
    2 TB PCIe NVMe M.2 SSD
    Internet Speed
    Intel Wi-Fi 7 BE200 (2x2) and Bluetooth 5.4
    Browser
    Chrome and Edge
    Antivirus
    Windows Defender and Malwarebytes Premium
Thanks Brink,
The computer was set as Local account since the installation and never had a MS account.
The strange is that I was able to access the data on both drives under Win PE.
Had some problems trying to set a drive image using Macrium Reflect.
I´m disabling device encryption and will report back.
 

My Computers

System One System Two

  • OS
    Windows 7 HP 64 - Windows 11 Pro - Lubuntu
    Computer type
    PC/Desktop
    Manufacturer/Model
    custom build
    CPU
    i5 6600K - 800MHz to 4400MHz
    Motherboard
    GA-Z170-HD3P
    Memory
    4+4G GSkill DDR4 3000
    Graphics Card(s)
    IG - Intel 530
    Monitor(s) Displays
    Samsung 226BW
    Screen Resolution
    1680x1050
    Hard Drives
    (1) -1 SM951 – 128GB M.2 AHCI PCIe SSD drive for Win 11
    (2) -1 WD SATA 3 - 1T for Data
    (3) -1 WD SATA 3 - 1T for backup
    (4) -1 BX500 SSD - 128G for Windows 7 and Lubuntu
    PSU
    Thermaltake 450W TR2 gold
    Keyboard
    Old and good Chicony mechanical keyboard
    Mouse
    Logitech mX performance - 9 buttons (had to disable some)
    Internet Speed
    500 Mb/s
    Browser
    Firefox 64
  • Operating System
    Windows 7 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Asus Q550LF
    CPU
    i7-4500U 800- 3000MHz
    Motherboard
    Asus Q550LF
    Memory
    (4+4)G DDR3 1600
    Graphics card(s)
    IG intel 4400 + NVIDIA GeForce GT 745M
    Sound Card
    Realtek
    Monitor(s) Displays
    LG Display LP156WF4-SPH1
    Screen Resolution
    1920 x 1080
    Hard Drives
    BX500 120G SSD for Windows and programs
    & 1T HDD for data
    Internet Speed
    350 Mb/s
    Browser
    Firefox 64
Before I did a clean install I booted from a Win PE and made an image with Macrium Reflect of the old installation so I could retrieve the data and eventually all system.
The Image build went normal and afterwords I did a verification. No problems.
When I retrieved the data all folders were empty. I mounted the image and the files were there but couldn't open any, all were corrupted.
Thankfully my friend had made a copy of all her data to an external drive
So BEWARE everyone. If you make Images with Device Encryption enabled, you may find that they are useless.

I did not understand how Device Encryption work. There is no encryption key. There is no owner.
For me and for my friend we found out that it's better to be disabled.
 

My Computers

System One System Two

  • OS
    Windows 7 HP 64 - Windows 11 Pro - Lubuntu
    Computer type
    PC/Desktop
    Manufacturer/Model
    custom build
    CPU
    i5 6600K - 800MHz to 4400MHz
    Motherboard
    GA-Z170-HD3P
    Memory
    4+4G GSkill DDR4 3000
    Graphics Card(s)
    IG - Intel 530
    Monitor(s) Displays
    Samsung 226BW
    Screen Resolution
    1680x1050
    Hard Drives
    (1) -1 SM951 – 128GB M.2 AHCI PCIe SSD drive for Win 11
    (2) -1 WD SATA 3 - 1T for Data
    (3) -1 WD SATA 3 - 1T for backup
    (4) -1 BX500 SSD - 128G for Windows 7 and Lubuntu
    PSU
    Thermaltake 450W TR2 gold
    Keyboard
    Old and good Chicony mechanical keyboard
    Mouse
    Logitech mX performance - 9 buttons (had to disable some)
    Internet Speed
    500 Mb/s
    Browser
    Firefox 64
  • Operating System
    Windows 7 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Asus Q550LF
    CPU
    i7-4500U 800- 3000MHz
    Motherboard
    Asus Q550LF
    Memory
    (4+4)G DDR3 1600
    Graphics card(s)
    IG intel 4400 + NVIDIA GeForce GT 745M
    Sound Card
    Realtek
    Monitor(s) Displays
    LG Display LP156WF4-SPH1
    Screen Resolution
    1920 x 1080
    Hard Drives
    BX500 120G SSD for Windows and programs
    & 1T HDD for data
    Internet Speed
    350 Mb/s
    Browser
    Firefox 64
I did not understand how Device Encryption work. There is no encryption key. There is no owner.
For me and for my friend we found out that it's better to be disabled.
This is rather incorrect. The encryption key is stored on the TPM and is automatic.

I am pretty sure Macrium Reflect can handle device encryption.
 

My Computer

System One

  • OS
    Windows 10 Pro + others in VHDs
    Computer type
    Laptop
    Manufacturer/Model
    ASUS Vivobook 14
    CPU
    I7
    Motherboard
    Yep, Laptop has one.
    Memory
    16 GB
    Graphics Card(s)
    Integrated Intel Iris XE
    Sound Card
    Realtek built in
    Monitor(s) Displays
    N/A
    Screen Resolution
    1920x1080
    Hard Drives
    1 TB Optane NVME SSD, 1 TB NVME SSD
    PSU
    Yep, got one
    Case
    Yep, got one
    Cooling
    Stella Artois
    Keyboard
    Built in
    Mouse
    Bluetooth , wired
    Internet Speed
    72 Mb/s :-(
    Browser
    Edge mostly
    Antivirus
    Defender
    Other Info
    TPM 2.0
This is rather incorrect. The encryption key is stored on the TPM and is automatic.

I am pretty sure Macrium Reflect can handle device encryption.
If you boot from a WinPE and run Macrium Reflect, how can it handle a encrypted drive?
 

My Computers

System One System Two

  • OS
    Windows 7 HP 64 - Windows 11 Pro - Lubuntu
    Computer type
    PC/Desktop
    Manufacturer/Model
    custom build
    CPU
    i5 6600K - 800MHz to 4400MHz
    Motherboard
    GA-Z170-HD3P
    Memory
    4+4G GSkill DDR4 3000
    Graphics Card(s)
    IG - Intel 530
    Monitor(s) Displays
    Samsung 226BW
    Screen Resolution
    1680x1050
    Hard Drives
    (1) -1 SM951 – 128GB M.2 AHCI PCIe SSD drive for Win 11
    (2) -1 WD SATA 3 - 1T for Data
    (3) -1 WD SATA 3 - 1T for backup
    (4) -1 BX500 SSD - 128G for Windows 7 and Lubuntu
    PSU
    Thermaltake 450W TR2 gold
    Keyboard
    Old and good Chicony mechanical keyboard
    Mouse
    Logitech mX performance - 9 buttons (had to disable some)
    Internet Speed
    500 Mb/s
    Browser
    Firefox 64
  • Operating System
    Windows 7 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Asus Q550LF
    CPU
    i7-4500U 800- 3000MHz
    Motherboard
    Asus Q550LF
    Memory
    (4+4)G DDR3 1600
    Graphics card(s)
    IG intel 4400 + NVIDIA GeForce GT 745M
    Sound Card
    Realtek
    Monitor(s) Displays
    LG Display LP156WF4-SPH1
    Screen Resolution
    1920 x 1080
    Hard Drives
    BX500 120G SSD for Windows and programs
    & 1T HDD for data
    Internet Speed
    350 Mb/s
    Browser
    Firefox 64
@Megahertz

As cereberus said the key/s are stored in the TPM. You can also save it to a file. You may see my first post in this thread How to Partition bitlocker encrypted System drive C: on my OEM PC? - Windows 10 Help Forums
It is also saved in the Microsoft account. One can login and get it.

Macrium Reflect WinRE rescue flash drive: When you create the rescue flash drive, click on "Advanced" and put a checkmark in both
" Add Bitlocker Support" and " Automatically unlock Bitlocker Volumes". The keys will be read from the TPM and saved in the files in the rescue media.This will be used to unlock the volumes when you backup using the recovery media.04-12-2023 23-27-55.jpg.
 

My Computers

System One System Two

  • OS
    Windows 11 Pro Version:23H2 OS Build: 22631.3155
    Computer type
    PC/Desktop
    Manufacturer/Model
    Beelink Mini PC Model: SEi12
    CPU
    12th Gen Intel core i5-1235U(Alder
    Motherboard
    SEi (manufactured by AZW)
    Memory
    16*2 (32 GB) DDR 4-3200(1600MHz) Crucial Technology
    Graphics Card(s)
    Intel Iris Xe Graphics (Internal)
    Sound Card
    Internal
    Monitor(s) Displays
    BenQ GW2283
    Screen Resolution
    1920*1080
    Hard Drives
    500GB NVME (Kingston SNV2S500G)
    1TB (Crucial CT1000BX500SSD1)
    PSU
    Power Brick 19V-6.32A , 120.08W
    Keyboard
    Dell KB3322Wi (Wireless)
    Mouse
    Dell WM118t (Wireless)
    Internet Speed
    4G/5G
    Browser
    MS Edge, Chrome
    Antivirus
    Malwarebytes Premium - Subscription
  • Operating System
    Windows 11 Home Version 23H2 Build 22631. 3155
    Computer type
    PC/Desktop
    Manufacturer/Model
    Dell Inspiron 3280 AIO
    CPU
    Intel Core i3 8145U
    Motherboard
    Dell inc. 027W48
    Memory
    Intel Optane 16GB module + DDR 4 16GB
    Graphics card(s)
    Intel UHD Graphics 620
    Sound Card
    Internal
    Monitor(s) Displays
    Dell Monitor 22"
    Screen Resolution
    1920x1080
    Hard Drives
    Crucial CT1000BX500SSD1 ; 1000,2 GB
    PSU
    Power Brick
    Case
    All-in one
    Mouse
    Dell Wireless KM 636
    Keyboard
    Dell Wireless KM636
    Internet Speed
    4G
    Browser
    Edge, Chrome
    Antivirus
    Malwarebytes
    Other Info
    Upgraded from Windows 10 Home to Windows 11 Home on 28 Oct 2023
@Megahertz

As cereberus said the key/s are stored in the TPM. You can also save it to a file. You may see my first post in this thread How to Partition bitlocker encrypted System drive C: on my OEM PC? - Windows 10 Help Forums
It is also saved in the Microsoft account. One can login and get it.

Macrium Reflect WinRE rescue flash drive: When you create the rescue flash drive, click on "Advanced" and put a checkmark in both
" Add Bitlocker Support" and " Automatically unlock Bitlocker Volumes". The keys will be read from the TPM and saved in the files in the rescue media.This will be used to unlock the volumes when you backup using the recovery media.View attachment 79988.
Thanks Jumanji for the helpful explanation.
I built the Macrium Reflect WinRE rescue flash drive on my computer, that has no TPM. This probably explain why the files on the image created from my friend computer (with Device Encryption) are "corrupted".
 

My Computers

System One System Two

  • OS
    Windows 7 HP 64 - Windows 11 Pro - Lubuntu
    Computer type
    PC/Desktop
    Manufacturer/Model
    custom build
    CPU
    i5 6600K - 800MHz to 4400MHz
    Motherboard
    GA-Z170-HD3P
    Memory
    4+4G GSkill DDR4 3000
    Graphics Card(s)
    IG - Intel 530
    Monitor(s) Displays
    Samsung 226BW
    Screen Resolution
    1680x1050
    Hard Drives
    (1) -1 SM951 – 128GB M.2 AHCI PCIe SSD drive for Win 11
    (2) -1 WD SATA 3 - 1T for Data
    (3) -1 WD SATA 3 - 1T for backup
    (4) -1 BX500 SSD - 128G for Windows 7 and Lubuntu
    PSU
    Thermaltake 450W TR2 gold
    Keyboard
    Old and good Chicony mechanical keyboard
    Mouse
    Logitech mX performance - 9 buttons (had to disable some)
    Internet Speed
    500 Mb/s
    Browser
    Firefox 64
  • Operating System
    Windows 7 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Asus Q550LF
    CPU
    i7-4500U 800- 3000MHz
    Motherboard
    Asus Q550LF
    Memory
    (4+4)G DDR3 1600
    Graphics card(s)
    IG intel 4400 + NVIDIA GeForce GT 745M
    Sound Card
    Realtek
    Monitor(s) Displays
    LG Display LP156WF4-SPH1
    Screen Resolution
    1920 x 1080
    Hard Drives
    BX500 120G SSD for Windows and programs
    & 1T HDD for data
    Internet Speed
    350 Mb/s
    Browser
    Firefox 64
A Tale of Two cities :-)..

(At present in my Dell Inspiron 3280 (upgraded from Windows 10 Home Single Language to Windows 11 Home Single Language), I have disabled Device Encryption. If anytime I enable Device Encryption, I have to recreate the MacriumReflect Rescue flash drive with "Add Bitlocker Support" and "Automatically unlock Bitlocker Volumes" enabled. Unlike the standard bitlocker, Device Encryption - which is a toned down version of the standard bitlocker - will automatically encrypt all the internal disks and volumes in it - subject to Modern standby present, login with Microsoft Account and TPM enabled in the system)05-12-2023 11-44-55.jpg
 
Last edited:

My Computers

System One System Two

  • OS
    Windows 11 Pro Version:23H2 OS Build: 22631.3155
    Computer type
    PC/Desktop
    Manufacturer/Model
    Beelink Mini PC Model: SEi12
    CPU
    12th Gen Intel core i5-1235U(Alder
    Motherboard
    SEi (manufactured by AZW)
    Memory
    16*2 (32 GB) DDR 4-3200(1600MHz) Crucial Technology
    Graphics Card(s)
    Intel Iris Xe Graphics (Internal)
    Sound Card
    Internal
    Monitor(s) Displays
    BenQ GW2283
    Screen Resolution
    1920*1080
    Hard Drives
    500GB NVME (Kingston SNV2S500G)
    1TB (Crucial CT1000BX500SSD1)
    PSU
    Power Brick 19V-6.32A , 120.08W
    Keyboard
    Dell KB3322Wi (Wireless)
    Mouse
    Dell WM118t (Wireless)
    Internet Speed
    4G/5G
    Browser
    MS Edge, Chrome
    Antivirus
    Malwarebytes Premium - Subscription
  • Operating System
    Windows 11 Home Version 23H2 Build 22631. 3155
    Computer type
    PC/Desktop
    Manufacturer/Model
    Dell Inspiron 3280 AIO
    CPU
    Intel Core i3 8145U
    Motherboard
    Dell inc. 027W48
    Memory
    Intel Optane 16GB module + DDR 4 16GB
    Graphics card(s)
    Intel UHD Graphics 620
    Sound Card
    Internal
    Monitor(s) Displays
    Dell Monitor 22"
    Screen Resolution
    1920x1080
    Hard Drives
    Crucial CT1000BX500SSD1 ; 1000,2 GB
    PSU
    Power Brick
    Case
    All-in one
    Mouse
    Dell Wireless KM 636
    Keyboard
    Dell Wireless KM636
    Internet Speed
    4G
    Browser
    Edge, Chrome
    Antivirus
    Malwarebytes
    Other Info
    Upgraded from Windows 10 Home to Windows 11 Home on 28 Oct 2023
Thanks Jumanji for the helpful explanation.
I built the Macrium Reflect WinRE rescue flash drive on my computer, that has no TPM. This probably explain why the files on the image created from my friend computer (with Device Encryption) are "corrupted".
Yeah - it is generally advisable that the Rescure Flash Drive is created on the pc it is to be used on to avoid missing drivers (can be added later though). However, I have never thought about bitlocked drives, where you must create Rescue Drive on same PC.
 

My Computer

System One

  • OS
    Windows 10 Pro + others in VHDs
    Computer type
    Laptop
    Manufacturer/Model
    ASUS Vivobook 14
    CPU
    I7
    Motherboard
    Yep, Laptop has one.
    Memory
    16 GB
    Graphics Card(s)
    Integrated Intel Iris XE
    Sound Card
    Realtek built in
    Monitor(s) Displays
    N/A
    Screen Resolution
    1920x1080
    Hard Drives
    1 TB Optane NVME SSD, 1 TB NVME SSD
    PSU
    Yep, got one
    Case
    Yep, got one
    Cooling
    Stella Artois
    Keyboard
    Built in
    Mouse
    Bluetooth , wired
    Internet Speed
    72 Mb/s :-(
    Browser
    Edge mostly
    Antivirus
    Defender
    Other Info
    TPM 2.0
Living and learning. Never thought the possibility of Bitlocker on a Win11 Home SL.
 

My Computers

System One System Two

  • OS
    Windows 7 HP 64 - Windows 11 Pro - Lubuntu
    Computer type
    PC/Desktop
    Manufacturer/Model
    custom build
    CPU
    i5 6600K - 800MHz to 4400MHz
    Motherboard
    GA-Z170-HD3P
    Memory
    4+4G GSkill DDR4 3000
    Graphics Card(s)
    IG - Intel 530
    Monitor(s) Displays
    Samsung 226BW
    Screen Resolution
    1680x1050
    Hard Drives
    (1) -1 SM951 – 128GB M.2 AHCI PCIe SSD drive for Win 11
    (2) -1 WD SATA 3 - 1T for Data
    (3) -1 WD SATA 3 - 1T for backup
    (4) -1 BX500 SSD - 128G for Windows 7 and Lubuntu
    PSU
    Thermaltake 450W TR2 gold
    Keyboard
    Old and good Chicony mechanical keyboard
    Mouse
    Logitech mX performance - 9 buttons (had to disable some)
    Internet Speed
    500 Mb/s
    Browser
    Firefox 64
  • Operating System
    Windows 7 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Asus Q550LF
    CPU
    i7-4500U 800- 3000MHz
    Motherboard
    Asus Q550LF
    Memory
    (4+4)G DDR3 1600
    Graphics card(s)
    IG intel 4400 + NVIDIA GeForce GT 745M
    Sound Card
    Realtek
    Monitor(s) Displays
    LG Display LP156WF4-SPH1
    Screen Resolution
    1920 x 1080
    Hard Drives
    BX500 120G SSD for Windows and programs
    & 1T HDD for data
    Internet Speed
    350 Mb/s
    Browser
    Firefox 64
Living and learning. Never thought the possibility of Bitlocker on a Win11 Home SL.
Even I did not know anything about it, till I set up the PC in Dec 2019. When I opened Disk Management I saw the 1TB System disk (HDD) C: saying it is BitLocker encrypted. Opening the Control Panel, I saw "Device Encryption". Clicking on it opened the Device Encryption Window where I can switch it on or off, Also a Bitlocker settings link which opened a window where I can save the key to a file.

(Now Control Panel > Device Encryption straightaway opens the page to save the keys as shown below

05-12-2023 22-18-45.jpg


Device Encryption on/off has been shifted to Start > Settings > Privacy & security as shown in my last post, post #9)

So we all learn when we encounter it and/or listening to user experiences, me included :-) .

I shall continue with my post #9 tomorrow . I have more information for the users to listen to :-).
 
Last edited:

My Computers

System One System Two

  • OS
    Windows 11 Pro Version:23H2 OS Build: 22631.3155
    Computer type
    PC/Desktop
    Manufacturer/Model
    Beelink Mini PC Model: SEi12
    CPU
    12th Gen Intel core i5-1235U(Alder
    Motherboard
    SEi (manufactured by AZW)
    Memory
    16*2 (32 GB) DDR 4-3200(1600MHz) Crucial Technology
    Graphics Card(s)
    Intel Iris Xe Graphics (Internal)
    Sound Card
    Internal
    Monitor(s) Displays
    BenQ GW2283
    Screen Resolution
    1920*1080
    Hard Drives
    500GB NVME (Kingston SNV2S500G)
    1TB (Crucial CT1000BX500SSD1)
    PSU
    Power Brick 19V-6.32A , 120.08W
    Keyboard
    Dell KB3322Wi (Wireless)
    Mouse
    Dell WM118t (Wireless)
    Internet Speed
    4G/5G
    Browser
    MS Edge, Chrome
    Antivirus
    Malwarebytes Premium - Subscription
  • Operating System
    Windows 11 Home Version 23H2 Build 22631. 3155
    Computer type
    PC/Desktop
    Manufacturer/Model
    Dell Inspiron 3280 AIO
    CPU
    Intel Core i3 8145U
    Motherboard
    Dell inc. 027W48
    Memory
    Intel Optane 16GB module + DDR 4 16GB
    Graphics card(s)
    Intel UHD Graphics 620
    Sound Card
    Internal
    Monitor(s) Displays
    Dell Monitor 22"
    Screen Resolution
    1920x1080
    Hard Drives
    Crucial CT1000BX500SSD1 ; 1000,2 GB
    PSU
    Power Brick
    Case
    All-in one
    Mouse
    Dell Wireless KM 636
    Keyboard
    Dell Wireless KM636
    Internet Speed
    4G
    Browser
    Edge, Chrome
    Antivirus
    Malwarebytes
    Other Info
    Upgraded from Windows 10 Home to Windows 11 Home on 28 Oct 2023
To illustrate the work flow on creating a Macrium Reflect WinRE Rescue Flash drive, I first turned on Device Encryption ( since I had turned it OFF long ago)A 05-12-2023 16-40-27.jpg

( It took about two hours to encrypt all volumes in my 1TB SSD)

Once you know that all volumes in the Internal disks are bitlocker encrypted - you can check it in Windows Disk Management- proceed to save the Recovery keys of each volume to a file,

Control Panel > Device Encryption, straightaway opens the page to save the keys as shown below. ( this part is not obvious for the first timer and he may miss it and may later wonder where the recovery keys are). When that page opens, click on every volume, and then "Back up your recovery key" and save it to a file on an external media.. B 05-12-2023 14-56-03.jpg

C 05-12-2023 15-23-16.jpg

Now you are ready to create your Macrium Reflect WinRE rescue flash drive. During the process click on Advanced > Options and check that
"Add Bitlocker Support" and "Automatically unlock BitLocker Volumes" are enabled. Proceed to "Build" your recovery drive.

06-12-2023 22-33-38.jpg

Now when you boot from the recovery drive the bitlocked volumes will be automatically unlocked for imaging.

The following screenshots are just for information. You need not check on this when booting the Rescue drive and start imaging.

1. When the MacriumReflect Main page appears after successful boot, you can click on MacriumReflect PE Explorer in the task bar and then open Boot (X:) to explore. ( X: is the RAM drive where the WinPE is loaded). There you can see all the recovery key files are listed.. You can even click on them to open and see the recovery key.

X drive.jpg

2. You can find the Recovery keys in your Microsoft account. Log into your Microsoft account, click on the "Devices" Tab > Manage recovery keys." It will open a page where all the drives and the respective Recovery keys are listed.

D 05-12-2023 16-11-21.jpg

That's all for the day.
 

My Computers

System One System Two

  • OS
    Windows 11 Pro Version:23H2 OS Build: 22631.3155
    Computer type
    PC/Desktop
    Manufacturer/Model
    Beelink Mini PC Model: SEi12
    CPU
    12th Gen Intel core i5-1235U(Alder
    Motherboard
    SEi (manufactured by AZW)
    Memory
    16*2 (32 GB) DDR 4-3200(1600MHz) Crucial Technology
    Graphics Card(s)
    Intel Iris Xe Graphics (Internal)
    Sound Card
    Internal
    Monitor(s) Displays
    BenQ GW2283
    Screen Resolution
    1920*1080
    Hard Drives
    500GB NVME (Kingston SNV2S500G)
    1TB (Crucial CT1000BX500SSD1)
    PSU
    Power Brick 19V-6.32A , 120.08W
    Keyboard
    Dell KB3322Wi (Wireless)
    Mouse
    Dell WM118t (Wireless)
    Internet Speed
    4G/5G
    Browser
    MS Edge, Chrome
    Antivirus
    Malwarebytes Premium - Subscription
  • Operating System
    Windows 11 Home Version 23H2 Build 22631. 3155
    Computer type
    PC/Desktop
    Manufacturer/Model
    Dell Inspiron 3280 AIO
    CPU
    Intel Core i3 8145U
    Motherboard
    Dell inc. 027W48
    Memory
    Intel Optane 16GB module + DDR 4 16GB
    Graphics card(s)
    Intel UHD Graphics 620
    Sound Card
    Internal
    Monitor(s) Displays
    Dell Monitor 22"
    Screen Resolution
    1920x1080
    Hard Drives
    Crucial CT1000BX500SSD1 ; 1000,2 GB
    PSU
    Power Brick
    Case
    All-in one
    Mouse
    Dell Wireless KM 636
    Keyboard
    Dell Wireless KM636
    Internet Speed
    4G
    Browser
    Edge, Chrome
    Antivirus
    Malwarebytes
    Other Info
    Upgraded from Windows 10 Home to Windows 11 Home on 28 Oct 2023
Interesting thread, I thought only Dell computers with Windows Home originally had the bitlocker turned on like mines did which I turned off....
When I goto Settings -> Privacy & Security -> Device Encryption, I don't even have the Device encryption option available even though bitlocker is turned off. Is there a way to turn off the encryption settings managed by BitLocker?

1701944519194.png

and when I click on BitLocker driver encryption, I get:
1701944698401.png


Read in Turn On or Off Device Encryption in Windows 11 Tutorial as I have modern standby disabled which may be why I don't have the Device Encryption toggle.
 

My Computer

System One

  • OS
    Windows XP/7/8/8.1/10/11, Linux, Android, FreeBSD Unix
    Computer type
    Laptop
    Manufacturer/Model
    Dell XPS 15 9570
    CPU
    Intel® Core™ i7-8750H 8th Gen Processor 2.2Ghz up to 4.1Ghz
    Motherboard
    Dell XPS 15 9570
    Memory
    32GB using 2x16GB modules
    Graphics Card(s)
    Intel UHD 630 & NVIDIA GeForce GTX 1050 Ti with 4GB DDR5
    Sound Card
    Realtek ALC3266-CG
    Monitor(s) Displays
    15.6" 4K Touch UltraHD 3840x2160 made by Sharp
    Screen Resolution
    3840x2160
    Hard Drives
    Toshiba KXG60ZNV1T02 NVMe 1024GB/1TB SSD
    PSU
    Dell XPS 15 9570
    Case
    Dell XPS 15 9570
    Cooling
    Stock
    Keyboard
    Stock
    Mouse
    SwitftPoint ProPoint
    Internet Speed
    Comcast/XFinity 1.44Gbps/42.5Mbps
    Browser
    Microsoft EDGE (Chromium based) & Google Chrome
    Antivirus
    Windows Defender that came with Windows
Interesting thread, I thought only Dell computers with Windows Home originally had the bitlocker turned on like mines did which I turned off....
When I goto Settings -> Privacy & Security -> Device Encryption, I don't even have the Device encryption option available even though bitlocker is turned off. Is there a way to turn off the encryption settings managed by BitLocker?

View attachment 80324

and when I click on BitLocker driver encryption, I get:
View attachment 80326


Read in Turn On or Off Device Encryption in Windows 11 Tutorial as I have modern standby disabled which may be why I don't have the Device Encryption toggle.
Sure, Modern Standby is one of the many essential requirements for Device Encryption.

From what I see from your screenshots, your system has standard BitLocker Drive Encryption which you may want to turn on. From my view point standard BitLocker Drive Encryption is all hassles and I haven't tried or turned it on though the PC from which I am typing this post runs Windows 11 Pro. I also don't know why Device Encryption shows up in Privacy and security in your PC. My windows 11 Pro PC does not show anything Device Encryption. Screenshots below.

07-12-2023 21-12-28.jpg

07-12-2023 21-18-16.jpg

If you want to turn on BitLocker Drive Encryption and manage it



For any further queries/questions on BitLocker Drive Encryption you may start a new thread to take on other experts familiar with it :-) .
 

My Computers

System One System Two

  • OS
    Windows 11 Pro Version:23H2 OS Build: 22631.3155
    Computer type
    PC/Desktop
    Manufacturer/Model
    Beelink Mini PC Model: SEi12
    CPU
    12th Gen Intel core i5-1235U(Alder
    Motherboard
    SEi (manufactured by AZW)
    Memory
    16*2 (32 GB) DDR 4-3200(1600MHz) Crucial Technology
    Graphics Card(s)
    Intel Iris Xe Graphics (Internal)
    Sound Card
    Internal
    Monitor(s) Displays
    BenQ GW2283
    Screen Resolution
    1920*1080
    Hard Drives
    500GB NVME (Kingston SNV2S500G)
    1TB (Crucial CT1000BX500SSD1)
    PSU
    Power Brick 19V-6.32A , 120.08W
    Keyboard
    Dell KB3322Wi (Wireless)
    Mouse
    Dell WM118t (Wireless)
    Internet Speed
    4G/5G
    Browser
    MS Edge, Chrome
    Antivirus
    Malwarebytes Premium - Subscription
  • Operating System
    Windows 11 Home Version 23H2 Build 22631. 3155
    Computer type
    PC/Desktop
    Manufacturer/Model
    Dell Inspiron 3280 AIO
    CPU
    Intel Core i3 8145U
    Motherboard
    Dell inc. 027W48
    Memory
    Intel Optane 16GB module + DDR 4 16GB
    Graphics card(s)
    Intel UHD Graphics 620
    Sound Card
    Internal
    Monitor(s) Displays
    Dell Monitor 22"
    Screen Resolution
    1920x1080
    Hard Drives
    Crucial CT1000BX500SSD1 ; 1000,2 GB
    PSU
    Power Brick
    Case
    All-in one
    Mouse
    Dell Wireless KM 636
    Keyboard
    Dell Wireless KM636
    Internet Speed
    4G
    Browser
    Edge, Chrome
    Antivirus
    Malwarebytes
    Other Info
    Upgraded from Windows 10 Home to Windows 11 Home on 28 Oct 2023
Not an expert by any means but it is my understanding that for any device using modern standby, Device Encryption is now automatically enabled when Home is installed. Yes, normally we think modern standby is for laptops as all new ones come factory shipped with modern standby. However, depending on the UEFI bios of a PC, some PCs can also use modern standby. I have found this to be especially true for for all-in-ones which use laptop motherboards.

Device encryption encrypts ALL FIXED drives whereas with standard bitlocker offered in PRO, the user has the option to choose which drives to encrypt.

The user must be aware that if any external drive is recognized by the system as FIXED (and some of them do get recognized as such), that drive will also be automatically encrypted if device encryption is enabled. If that external drive gets used on another machine, the files can not be accessed without the recovery key from the machine where the drive was encrypted.

Edited to fix terminology
 
Last edited:

My Computers

System One System Two

  • OS
    Windows 11 Pro 23H2 22631.3155
    Computer type
    PC/Desktop
    Manufacturer/Model
    Dell Optiplex 7080
    CPU
    i9-10900 10 core 20 threads
    Motherboard
    DELL 0J37VM
    Memory
    32 gb
    Graphics Card(s)
    none-Intel UHD Graphics 630
    Sound Card
    Integrated Realtek
    Monitor(s) Displays
    Benq 27
    Screen Resolution
    2560x1440
    Hard Drives
    1tb Solidigm m.2 +256gb ssd+512 gb usb m.2 sata
    PSU
    500w
    Case
    MT
    Cooling
    Dell Premium
    Keyboard
    Logitech wired
    Mouse
    Logitech wireless
    Internet Speed
    so slow I'm too embarrassed to tell
    Browser
    Firefox
    Antivirus
    Defender+MWB Premium
  • Operating System
    Windows 10 Pro 22H2 19045.3930
    Computer type
    PC/Desktop
    Manufacturer/Model
    Dell Optiplex 9020
    CPU
    i7-4770
    Memory
    24 gb
    Monitor(s) Displays
    Benq 27
    Screen Resolution
    2560x1440
    Hard Drives
    256 gb Toshiba BG4 M.2 NVE SSB and 1 tb hdd
    PSU
    500w
    Case
    MT
    Cooling
    Dell factory
    Mouse
    Logitech wireless
    Keyboard
    Logitech wired
    Internet Speed
    still not telling
    Browser
    Firefox
    Antivirus
    Defender+MWB Premium
........... for any device using modern standby, Bitlocker Drive Encryption is now automatically enabled when Home is installed.
That should read as " for any device using modern standby, Device Encryption is now automatically enabled when Home is installed."

.........BLDE encrypts ALL FIXED drives whereas with standard bitlocker, the user has the option to choose which drives to encrypt.
To differentiate between BitLocker Device Encryption and BitLocker Drive Encryption, that should read as " Device Encryption encrypts ALL FIXED drives whereas with standard bitlocker, the user has the option to choose which drives to encrypt."

With those modifications , everything you said is correct and unambiguous. :-).
 

My Computers

System One System Two

  • OS
    Windows 11 Pro Version:23H2 OS Build: 22631.3155
    Computer type
    PC/Desktop
    Manufacturer/Model
    Beelink Mini PC Model: SEi12
    CPU
    12th Gen Intel core i5-1235U(Alder
    Motherboard
    SEi (manufactured by AZW)
    Memory
    16*2 (32 GB) DDR 4-3200(1600MHz) Crucial Technology
    Graphics Card(s)
    Intel Iris Xe Graphics (Internal)
    Sound Card
    Internal
    Monitor(s) Displays
    BenQ GW2283
    Screen Resolution
    1920*1080
    Hard Drives
    500GB NVME (Kingston SNV2S500G)
    1TB (Crucial CT1000BX500SSD1)
    PSU
    Power Brick 19V-6.32A , 120.08W
    Keyboard
    Dell KB3322Wi (Wireless)
    Mouse
    Dell WM118t (Wireless)
    Internet Speed
    4G/5G
    Browser
    MS Edge, Chrome
    Antivirus
    Malwarebytes Premium - Subscription
  • Operating System
    Windows 11 Home Version 23H2 Build 22631. 3155
    Computer type
    PC/Desktop
    Manufacturer/Model
    Dell Inspiron 3280 AIO
    CPU
    Intel Core i3 8145U
    Motherboard
    Dell inc. 027W48
    Memory
    Intel Optane 16GB module + DDR 4 16GB
    Graphics card(s)
    Intel UHD Graphics 620
    Sound Card
    Internal
    Monitor(s) Displays
    Dell Monitor 22"
    Screen Resolution
    1920x1080
    Hard Drives
    Crucial CT1000BX500SSD1 ; 1000,2 GB
    PSU
    Power Brick
    Case
    All-in one
    Mouse
    Dell Wireless KM 636
    Keyboard
    Dell Wireless KM636
    Internet Speed
    4G
    Browser
    Edge, Chrome
    Antivirus
    Malwarebytes
    Other Info
    Upgraded from Windows 10 Home to Windows 11 Home on 28 Oct 2023
Have you tried at cmd prompt

manage-bde -protectors C: -get
 

My Computers

System One System Two

  • OS
    Win7
    Computer type
    PC/Desktop
    CPU
    i5-8400
    Motherboard
    gigabyte b365m ds3h
    Memory
    2x8gb 3200mhz
    Monitor(s) Displays
    benq gw2480
    PSU
    bequiet pure power 11 400CM
    Cooling
    cryorig m9i
  • Operating System
    win7
    Computer type
    PC/Desktop
    CPU
    pentium g5400
    Motherboard
    gigabyte b365m ds3h
    Memory
    1x8gb 2400
    PSU
    xfx pro 450
Have you tried at cmd prompt

manage-bde -protectors C: -get
To whom is it addressed to? And in what connection?

On my Dell Iinspiron 3280 AIO running Windows 11 Home, I have recently switched on Device Encryption (for the 22nd time in four years :-)) . I have no problems. I will turn off Device encryption only before updating BIOS if any comes through via Dell SupportAssist. (The recovery Keys for all the drives in it are stored safely on two media, in case I need it. No need to use bde commands)

On my Beelink Sei12 Mini PC running Windows 11 Pro, I can switch on BitLocker Drive encryption on any drive. I am not doing it since there is no need for it and drive encryption is a big hassle..
 

My Computers

System One System Two

  • OS
    Windows 11 Pro Version:23H2 OS Build: 22631.3155
    Computer type
    PC/Desktop
    Manufacturer/Model
    Beelink Mini PC Model: SEi12
    CPU
    12th Gen Intel core i5-1235U(Alder
    Motherboard
    SEi (manufactured by AZW)
    Memory
    16*2 (32 GB) DDR 4-3200(1600MHz) Crucial Technology
    Graphics Card(s)
    Intel Iris Xe Graphics (Internal)
    Sound Card
    Internal
    Monitor(s) Displays
    BenQ GW2283
    Screen Resolution
    1920*1080
    Hard Drives
    500GB NVME (Kingston SNV2S500G)
    1TB (Crucial CT1000BX500SSD1)
    PSU
    Power Brick 19V-6.32A , 120.08W
    Keyboard
    Dell KB3322Wi (Wireless)
    Mouse
    Dell WM118t (Wireless)
    Internet Speed
    4G/5G
    Browser
    MS Edge, Chrome
    Antivirus
    Malwarebytes Premium - Subscription
  • Operating System
    Windows 11 Home Version 23H2 Build 22631. 3155
    Computer type
    PC/Desktop
    Manufacturer/Model
    Dell Inspiron 3280 AIO
    CPU
    Intel Core i3 8145U
    Motherboard
    Dell inc. 027W48
    Memory
    Intel Optane 16GB module + DDR 4 16GB
    Graphics card(s)
    Intel UHD Graphics 620
    Sound Card
    Internal
    Monitor(s) Displays
    Dell Monitor 22"
    Screen Resolution
    1920x1080
    Hard Drives
    Crucial CT1000BX500SSD1 ; 1000,2 GB
    PSU
    Power Brick
    Case
    All-in one
    Mouse
    Dell Wireless KM 636
    Keyboard
    Dell Wireless KM636
    Internet Speed
    4G
    Browser
    Edge, Chrome
    Antivirus
    Malwarebytes
    Other Info
    Upgraded from Windows 10 Home to Windows 11 Home on 28 Oct 2023

My Computers

System One System Two

  • OS
    Win7
    Computer type
    PC/Desktop
    CPU
    i5-8400
    Motherboard
    gigabyte b365m ds3h
    Memory
    2x8gb 3200mhz
    Monitor(s) Displays
    benq gw2480
    PSU
    bequiet pure power 11 400CM
    Cooling
    cryorig m9i
  • Operating System
    win7
    Computer type
    PC/Desktop
    CPU
    pentium g5400
    Motherboard
    gigabyte b365m ds3h
    Memory
    1x8gb 2400
    PSU
    xfx pro 450

Latest Support Threads

Latest Tutorials

Back
Top Bottom