How to prevent automatic drive encryption in Windows 11?


Spartan

Well-known member
Member
VIP
Local time
9:38 AM
Posts
234
Location
Dubai
OS
Windows 11 Pro
So I work for a company that sells computers and I do some tweaking to disable telemetry and whatnot for customers who choose to do so.

Some SSDs which support hardware encryption such as the Samsung 980 PRO and many of the new ones, the moment you create a Windows account you will notice that BitLocker status in control panel says "Encrypting". This does not happen while I am in OOBE only once the account is created.

I then saw the the developer of Rufus has added an option to disable automatic drive encryption when creating a Windows ISO so I asked him if there was a setting that I could change or registry entry to prevent this but his answer was:

You can find that from our Open Source code here.

Also, documented here.

I'm not sure how can I do that while in OOBE.

Another guy on Ten Forums also mentioned this registry entry but I'm not sure if it really works, When I am in:

HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Control/Bitlocker

I see the following subfolders:

  • AutoDE
  • KeyBackupMonitor
  • RecoveryPasswordRotation

Do I need to create a DWORD in the root of the Bitlocker folder? "Value: PreventDeviceEncryption equal to True (1) (Default is False) Type: REG_DWORD"

Please help
 

My Computers

System One System Two

  • OS
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Alienware m16 R1
    CPU
    AMD Ryzen 9 7945HX
    Motherboard
    Alienware
    Memory
    SK Hynix 64 GB 5200 MHz DDR5 RAM
    Graphics Card(s)
    GeForce RTX 4090 16 GB GDDR6
    Sound Card
    Realtek Audio
    Monitor(s) Displays
    16" QHD+ (2560 x 1600) 240Hz, 3ms 300-nits Screen + 34" Samsung Odyssey OLED G8 2K WQHD (3440 x 1440) Monitor
    Screen Resolution
    QHD (2560x 1440)
    Hard Drives
    2x Samsung 990 PRO 4TB SSDs + WD_BLACK SN770M 2TB SSD
    PSU
    330W AC Power Adapter
    Cooling
    Noctua NT-H2 + Fujipoly Extreme Thermal Pads
    Keyboard
    Alienware CherryMX mechanical keyboard (Laptop) + AW510K Mechanical Gaming Keyboard (external)
    Mouse
    Alienware Tri-Mode Wireless Gaming Mouse AW720M
    Internet Speed
    1 GBPS Down / 350 MBPS Up
    Browser
    Google Chrome
    Antivirus
    Avast Antivirus
  • Operating System
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Dell XPS 15 9500
    CPU
    Intel i7-10875H
    Memory
    Kingston FURY Impact 64 GB 3200 MHz DDR4 RAM
    Graphics card(s)
    nVIDIA GeForce GTX 1650 Ti Max-Q w/ 4 GB GDDR6
    Sound Card
    Realtek
    Monitor(s) Displays
    15.6 UHD+ Touch, InfinityEdge, 500-nits, Anti-Reflecitve
    Screen Resolution
    3840 x 2400
    Hard Drives
    Samsung 990 PRO 2TB + 4TB SSDs
    PSU
    Dell 130W Laptop Charger USB C Type C AC Adapter
    Cooling
    Noctua NT-H2 Thermal Paste on CPU + GPU
    Mouse
    Logitech MX Anywhere 3
    Internet Speed
    1 GBPS Down / 350 MBPS Up
    Browser
    Google Chrome
    Antivirus
    Avast Free Antivirus
 

My Computer

System One

  • OS
    Windows 11
    Computer type
    PC/Desktop
    Manufacturer/Model
    HP Pavilion
    CPU
    AMD Ryzen 7 5700G
    Motherboard
    Erica6
    Memory
    Micron Technology DDR4-3200 16GB
    Graphics Card(s)
    NVIDIA GeForce RTX 3060
    Sound Card
    Realtek ALC671
    Monitor(s) Displays
    Samsung SyncMaster U28E590
    Screen Resolution
    3840 x 2160
    Hard Drives
    SAMSUNG MZVLQ1T0HALB-000H1
Rufus is using the answer file method of passing a registry flag, instead of updating the key directly in the install WIM's registry hive.
You can integrate it into the image, so Windows can't enable BitLocker on first boot.

1. DISM mount your WIM image.
2. reg load HKLM\TEMP C:\mountpath\Windows\System32\config\SYSTEM
3. reg add HKLM\TEMP\CurrentControlSet\Control\BitLocker /v PreventDeviceEncryption /t REG_DWORD /d 1 /f
4. reg unload HKLM\TEMP
5. DISM commit your changes.

Disable BitLocker automatic device encryption

Disable BitLocker automatic device encryption​


OEMs can choose to disable device encryption and instead implement their own encryption technology on a device. To disable BitLocker automatic device encryption, you can use an Unattend file and set PreventDeviceEncryption to True. Alternately, you can update this registry key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\BitLocker Value: PreventDeviceEncryption equal to True (1).
 

My Computer

System One

  • OS
    Windows 7
The PreventDeviceEncryption value applies to Windows 8 not sure it will work with Windows 11.
 

My Computer

System One

  • OS
    Windows 11
    Computer type
    PC/Desktop
    Manufacturer/Model
    HP Pavilion
    CPU
    AMD Ryzen 7 5700G
    Motherboard
    Erica6
    Memory
    Micron Technology DDR4-3200 16GB
    Graphics Card(s)
    NVIDIA GeForce RTX 3060
    Sound Card
    Realtek ALC671
    Monitor(s) Displays
    Samsung SyncMaster U28E590
    Screen Resolution
    3840 x 2160
    Hard Drives
    SAMSUNG MZVLQ1T0HALB-000H1
did you even read the post?? :rolleyes: that has nothing to do with how you can disable encryption to start in the first place.
 

My Computers

System One System Two

  • OS
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Alienware m16 R1
    CPU
    AMD Ryzen 9 7945HX
    Motherboard
    Alienware
    Memory
    SK Hynix 64 GB 5200 MHz DDR5 RAM
    Graphics Card(s)
    GeForce RTX 4090 16 GB GDDR6
    Sound Card
    Realtek Audio
    Monitor(s) Displays
    16" QHD+ (2560 x 1600) 240Hz, 3ms 300-nits Screen + 34" Samsung Odyssey OLED G8 2K WQHD (3440 x 1440) Monitor
    Screen Resolution
    QHD (2560x 1440)
    Hard Drives
    2x Samsung 990 PRO 4TB SSDs + WD_BLACK SN770M 2TB SSD
    PSU
    330W AC Power Adapter
    Cooling
    Noctua NT-H2 + Fujipoly Extreme Thermal Pads
    Keyboard
    Alienware CherryMX mechanical keyboard (Laptop) + AW510K Mechanical Gaming Keyboard (external)
    Mouse
    Alienware Tri-Mode Wireless Gaming Mouse AW720M
    Internet Speed
    1 GBPS Down / 350 MBPS Up
    Browser
    Google Chrome
    Antivirus
    Avast Antivirus
  • Operating System
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Dell XPS 15 9500
    CPU
    Intel i7-10875H
    Memory
    Kingston FURY Impact 64 GB 3200 MHz DDR4 RAM
    Graphics card(s)
    nVIDIA GeForce GTX 1650 Ti Max-Q w/ 4 GB GDDR6
    Sound Card
    Realtek
    Monitor(s) Displays
    15.6 UHD+ Touch, InfinityEdge, 500-nits, Anti-Reflecitve
    Screen Resolution
    3840 x 2400
    Hard Drives
    Samsung 990 PRO 2TB + 4TB SSDs
    PSU
    Dell 130W Laptop Charger USB C Type C AC Adapter
    Cooling
    Noctua NT-H2 Thermal Paste on CPU + GPU
    Mouse
    Logitech MX Anywhere 3
    Internet Speed
    1 GBPS Down / 350 MBPS Up
    Browser
    Google Chrome
    Antivirus
    Avast Free Antivirus
I made the reg file. Will test it on a brand new machine soon and let y'all know if it works to prevent automatic encryption.
 

Attachments

  • BitLocker - Prevent automatic encryption.reg
    300 bytes · Views: 22

My Computers

System One System Two

  • OS
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Alienware m16 R1
    CPU
    AMD Ryzen 9 7945HX
    Motherboard
    Alienware
    Memory
    SK Hynix 64 GB 5200 MHz DDR5 RAM
    Graphics Card(s)
    GeForce RTX 4090 16 GB GDDR6
    Sound Card
    Realtek Audio
    Monitor(s) Displays
    16" QHD+ (2560 x 1600) 240Hz, 3ms 300-nits Screen + 34" Samsung Odyssey OLED G8 2K WQHD (3440 x 1440) Monitor
    Screen Resolution
    QHD (2560x 1440)
    Hard Drives
    2x Samsung 990 PRO 4TB SSDs + WD_BLACK SN770M 2TB SSD
    PSU
    330W AC Power Adapter
    Cooling
    Noctua NT-H2 + Fujipoly Extreme Thermal Pads
    Keyboard
    Alienware CherryMX mechanical keyboard (Laptop) + AW510K Mechanical Gaming Keyboard (external)
    Mouse
    Alienware Tri-Mode Wireless Gaming Mouse AW720M
    Internet Speed
    1 GBPS Down / 350 MBPS Up
    Browser
    Google Chrome
    Antivirus
    Avast Antivirus
  • Operating System
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Dell XPS 15 9500
    CPU
    Intel i7-10875H
    Memory
    Kingston FURY Impact 64 GB 3200 MHz DDR4 RAM
    Graphics card(s)
    nVIDIA GeForce GTX 1650 Ti Max-Q w/ 4 GB GDDR6
    Sound Card
    Realtek
    Monitor(s) Displays
    15.6 UHD+ Touch, InfinityEdge, 500-nits, Anti-Reflecitve
    Screen Resolution
    3840 x 2400
    Hard Drives
    Samsung 990 PRO 2TB + 4TB SSDs
    PSU
    Dell 130W Laptop Charger USB C Type C AC Adapter
    Cooling
    Noctua NT-H2 Thermal Paste on CPU + GPU
    Mouse
    Logitech MX Anywhere 3
    Internet Speed
    1 GBPS Down / 350 MBPS Up
    Browser
    Google Chrome
    Antivirus
    Avast Free Antivirus
I made the reg file. Will test it on a brand new machine soon and let y'all know if it works to prevent automatic encryption.
It worked when I tried it last week (regedit is on MS web page) But in the end, it is easier to just turn it off. Only worth doing this if rolling out to multiple devices.
 

My Computer

System One

  • OS
    Windows 10 Pro + others in VHDs
    Computer type
    Laptop
    Manufacturer/Model
    ASUS Vivobook 14
    CPU
    I7
    Motherboard
    Yep, Laptop has one.
    Memory
    16 GB
    Graphics Card(s)
    Integrated Intel Iris XE
    Sound Card
    Realtek built in
    Monitor(s) Displays
    N/A
    Screen Resolution
    1920x1080
    Hard Drives
    1 TB Optane NVME SSD, 1 TB NVME SSD
    PSU
    Yep, got one
    Case
    Yep, got one
    Cooling
    Stella Artois
    Keyboard
    Built in
    Mouse
    Bluetooth , wired
    Internet Speed
    72 Mb/s :-(
    Browser
    Edge mostly
    Antivirus
    Defender
    Other Info
    TPM 2.0
Typing encryption in the search bar brings up the settings for device encryption and bit locker. Seems easier than editing the registry.
 

My Computer

System One

  • OS
    Win11
    Computer type
    Laptop
    Manufacturer/Model
    2023 HP Pavilion 15t-eg200
    CPU
    Intel® Core™ i7-1255U
    Memory
    16 GB DDR4-3200 SDRAM (2 x 8 GB); 512 GB PCIe® NVMe™ M.2 SSD
    Screen Resolution
    1910x1080
Rufus accomplishes this in 2 ways: They modify the actual boot.wim file when they can, but fallback to the answer file method when necessary. I only know this because I too have been in touch with the author :-).
 

My Computers

System One System Two

  • OS
    Win11 Pro 23H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Home Built
    CPU
    Intel i7-11700K
    Motherboard
    ASUS Prime Z590-A
    Memory
    128GB Crucial Ballistix 3200MHz DRAM
    Graphics Card(s)
    No GPU - CPU graphics only (for now)
    Sound Card
    Realtek (on motherboard)
    Monitor(s) Displays
    HP Envy 32
    Screen Resolution
    2560 x 1440
    Hard Drives
    1 x 1TB NVMe Gen 4 x 4 SSD
    1 x 2TB NVMe Gen 3 x 4 SSD
    2 x 512GB 2.5" SSDs
    2 x 8TB HD
    PSU
    Corsair HX850i
    Case
    Corsair iCue 5000X RGB
    Cooling
    Noctua NH-D15 chromax.black cooler + 10 case fans
    Keyboard
    CODE backlit mechanical keyboard
    Mouse
    Logitech MX Master 3
    Internet Speed
    1Gb Up / 1 Gb Down
    Browser
    Edge
    Antivirus
    Windows Defender
    Other Info
    Additional options installed:
    WiFi 6E PCIe adapter
    ASUS ThunderboltEX 4 PCIe adapter
  • Operating System
    Win11 Pro 23H2
    Computer type
    Laptop
    Manufacturer/Model
    Lenovo ThinkBook 13x Gen 2
    CPU
    Intel i7-1255U
    Memory
    16 GB
    Graphics card(s)
    Intel Iris Xe Graphics
    Sound Card
    Realtek® ALC3306-CG codec
    Monitor(s) Displays
    13.3-inch IPS Display
    Screen Resolution
    WQXGA (2560 x 1600)
    Hard Drives
    2 TB 4 x 4 NVMe SSD
    PSU
    USB-C / Thunderbolt 4 Power / Charging
    Mouse
    Buttonless Glass Precision Touchpad
    Keyboard
    Backlit, spill resistant keyboard
    Internet Speed
    1Gb Up / 1Gb Down
    Browser
    Edge
    Antivirus
    Windows Defender
    Other Info
    WiFi 6e / Bluetooth 5.1 / Facial Recognition / Fingerprint Sensor / ToF (Time of Flight) Human Presence Sensor
Rufus accomplishes this in 2 ways: They modify the actual boot.wim file when they can, but fallback to the answer file method when necessary. I only know this because I too have been in touch with the author :-).
Are you sure Rufus modifies the boot.wim?
This GitHub feature request doesn't mention that option, and pbatard's commit only adds the answer file solution.
 

My Computer

System One

  • OS
    Windows 7
Are you sure Rufus modifies the boot.wim?
This GitHub feature request doesn't mention that option, and pbatard's commit only adds the answer file solution.
Quoting from Pete Batard's e-mail to me:

"The only small exception is for the TPM/SB/RAM registry bypasses that are only done through unattend if we can't mount the boot.wim image to edit its registry directly.

The reason we prefer editing the boot.wim registry directly (i.e.
offline registry editing which you can accomplish after mounting an
image) is that doing the registry changes through unattend makes command prompt windows appear briefly during boot, which we thought would scare some users into thinking that Rufus was doing something with the images.
However, the app store version of Rufus does not allow offline registry editing so we have to use unattend regedit then, which is why we have 2 methods of accomplishing the same thing. Everything else is just through unattend."

The funny thing is that his observation is precisely one of the things that bothered me. When I was doing this via an unattended answer file, it bothered me that you would see those flashes. So after his above statement, I modified my procedure to update the BOOT.WIM file and I'm much happier because it is completely transparent to the user. There are no flashes and no answer file needed.

I thought it very kind that he responded to my inquires. No doubt, he's a busy person, but I'm always appreciative when someone takes time to respond like that. It certainly helped me greatly!
 

My Computers

System One System Two

  • OS
    Win11 Pro 23H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Home Built
    CPU
    Intel i7-11700K
    Motherboard
    ASUS Prime Z590-A
    Memory
    128GB Crucial Ballistix 3200MHz DRAM
    Graphics Card(s)
    No GPU - CPU graphics only (for now)
    Sound Card
    Realtek (on motherboard)
    Monitor(s) Displays
    HP Envy 32
    Screen Resolution
    2560 x 1440
    Hard Drives
    1 x 1TB NVMe Gen 4 x 4 SSD
    1 x 2TB NVMe Gen 3 x 4 SSD
    2 x 512GB 2.5" SSDs
    2 x 8TB HD
    PSU
    Corsair HX850i
    Case
    Corsair iCue 5000X RGB
    Cooling
    Noctua NH-D15 chromax.black cooler + 10 case fans
    Keyboard
    CODE backlit mechanical keyboard
    Mouse
    Logitech MX Master 3
    Internet Speed
    1Gb Up / 1 Gb Down
    Browser
    Edge
    Antivirus
    Windows Defender
    Other Info
    Additional options installed:
    WiFi 6E PCIe adapter
    ASUS ThunderboltEX 4 PCIe adapter
  • Operating System
    Win11 Pro 23H2
    Computer type
    Laptop
    Manufacturer/Model
    Lenovo ThinkBook 13x Gen 2
    CPU
    Intel i7-1255U
    Memory
    16 GB
    Graphics card(s)
    Intel Iris Xe Graphics
    Sound Card
    Realtek® ALC3306-CG codec
    Monitor(s) Displays
    13.3-inch IPS Display
    Screen Resolution
    WQXGA (2560 x 1600)
    Hard Drives
    2 TB 4 x 4 NVMe SSD
    PSU
    USB-C / Thunderbolt 4 Power / Charging
    Mouse
    Buttonless Glass Precision Touchpad
    Keyboard
    Backlit, spill resistant keyboard
    Internet Speed
    1Gb Up / 1Gb Down
    Browser
    Edge
    Antivirus
    Windows Defender
    Other Info
    WiFi 6e / Bluetooth 5.1 / Facial Recognition / Fingerprint Sensor / ToF (Time of Flight) Human Presence Sensor
I downloaded his latest source code. While he has lines to set TPM Bypass keys in registry, I don't see him repeating this step for BypassRNO or PreventDeviceEncryption. Just be aware of that he's using the answer file for those features.
 

My Computer

System One

  • OS
    Windows 7
It worked when I tried it last week (regedit is on MS web page) But in the end, it is easier to just turn it off. Only worth doing this if rolling out to multiple devices.
Thanks a lot! Life saver! Now we can tweak the laptops we sell and use that registry file so Windows won't auto encrypt the SSDs when they create a user account! You don't know how many support tickets we receive about slow performance (due to BitLocker) or people who reinstalled the OS not even knowing that their SSD was encrypted
Typing encryption in the search bar brings up the settings for device encryption and bit locker. Seems easier than editing the registry.
You didn't seem to read the thread did you? It's very to turn it off from Control panel but I don't want it to even start for laptops that we sell to customers.
 

My Computers

System One System Two

  • OS
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Alienware m16 R1
    CPU
    AMD Ryzen 9 7945HX
    Motherboard
    Alienware
    Memory
    SK Hynix 64 GB 5200 MHz DDR5 RAM
    Graphics Card(s)
    GeForce RTX 4090 16 GB GDDR6
    Sound Card
    Realtek Audio
    Monitor(s) Displays
    16" QHD+ (2560 x 1600) 240Hz, 3ms 300-nits Screen + 34" Samsung Odyssey OLED G8 2K WQHD (3440 x 1440) Monitor
    Screen Resolution
    QHD (2560x 1440)
    Hard Drives
    2x Samsung 990 PRO 4TB SSDs + WD_BLACK SN770M 2TB SSD
    PSU
    330W AC Power Adapter
    Cooling
    Noctua NT-H2 + Fujipoly Extreme Thermal Pads
    Keyboard
    Alienware CherryMX mechanical keyboard (Laptop) + AW510K Mechanical Gaming Keyboard (external)
    Mouse
    Alienware Tri-Mode Wireless Gaming Mouse AW720M
    Internet Speed
    1 GBPS Down / 350 MBPS Up
    Browser
    Google Chrome
    Antivirus
    Avast Antivirus
  • Operating System
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Dell XPS 15 9500
    CPU
    Intel i7-10875H
    Memory
    Kingston FURY Impact 64 GB 3200 MHz DDR4 RAM
    Graphics card(s)
    nVIDIA GeForce GTX 1650 Ti Max-Q w/ 4 GB GDDR6
    Sound Card
    Realtek
    Monitor(s) Displays
    15.6 UHD+ Touch, InfinityEdge, 500-nits, Anti-Reflecitve
    Screen Resolution
    3840 x 2400
    Hard Drives
    Samsung 990 PRO 2TB + 4TB SSDs
    PSU
    Dell 130W Laptop Charger USB C Type C AC Adapter
    Cooling
    Noctua NT-H2 Thermal Paste on CPU + GPU
    Mouse
    Logitech MX Anywhere 3
    Internet Speed
    1 GBPS Down / 350 MBPS Up
    Browser
    Google Chrome
    Antivirus
    Avast Free Antivirus
Spartan,

I've been following this thread because I'm about to buy a new laptop.
HP ENVY 17-cr0001na
Added later: Which turned out not to be able to use S3 Sleep after all and is being returned. Quite disconcertingly, its PowerCfg -a results confirmed that the Registry edit had enabled S3 Sleep. It was only when I tried using it that I found out that the computer froze instead of going into S3 Sleep.

If I have understood correctly, I can apply your post #7 .reg file during OOBE {by opening a cmd prompt using Shift-F10 during the OOBE region-keyboard selection dialogs}.
Is that right?

I appreciate that the Registry change is only required for devices that support S0 Modern standby.
- Mine probably does not have S0 Modern standby but that has not been guaranteed so I am going to have to behave as though it does until I can demonstrate otherwise.
- The best I could get was an HP tech sp saying that he thought it was an S3 Sleep computer but he could not find any documentation to confirm that.
- I will also try to avoid creating an MSAccount altogether by using the guidance in the Clean install tutorial to bypass the internet connection check steps. Belts & braces.



All the best,
Denis
 
Last edited:

My Computer

System One

  • OS
    Windows 11 Home x64 Version 23H2 Build 22631.3447

My Computers

System One System Two

  • OS
    11 Pro 23H2 OS build 22631.3672
    Computer type
    Laptop
    Manufacturer/Model
    Acer Swift SF114-34
    CPU
    Pentium Silver N6000 1.10GHz
    Memory
    4GB
    Screen Resolution
    1920 x 1080
    Hard Drives
    SSD
    Cooling
    fanless
    Internet Speed
    13Mbps
    Browser
    Brave, Edge or Firefox
    Antivirus
    Webroot Secure Anywhere
    Other Info
    System 3

    ASUS T100TA Transformer
    Processor Intel Atom Z3740 @ 1.33GHz
    Installed RAM 2.00 GB (1.89 GB usable)
    System type 32-bit operating system, x64-based processor

    Edition Windows 10 Home
    Version 22H2 build 19045.3570
  • Operating System
    Windows 11 Pro 23H2 22631.2506
    Computer type
    Laptop
    Manufacturer/Model
    HP Mini 210-1090NR PC (bought in late 2009!)
    CPU
    Atom N450 1.66GHz
    Memory
    2GB
Ha ha; you mean it's completely opaque! If it were transparent, he would see it!😂
The term gets used interchangeably.
 

My Computer

System One

  • OS
    Windows 10 Pro + others in VHDs
    Computer type
    Laptop
    Manufacturer/Model
    ASUS Vivobook 14
    CPU
    I7
    Motherboard
    Yep, Laptop has one.
    Memory
    16 GB
    Graphics Card(s)
    Integrated Intel Iris XE
    Sound Card
    Realtek built in
    Monitor(s) Displays
    N/A
    Screen Resolution
    1920x1080
    Hard Drives
    1 TB Optane NVME SSD, 1 TB NVME SSD
    PSU
    Yep, got one
    Case
    Yep, got one
    Cooling
    Stella Artois
    Keyboard
    Built in
    Mouse
    Bluetooth , wired
    Internet Speed
    72 Mb/s :-(
    Browser
    Edge mostly
    Antivirus
    Defender
    Other Info
    TPM 2.0
The term gets used interchangeably.
Not by me! Surely, transparent means hiding nothing? I think y'all confuse transparent with invisible.
 

My Computers

System One System Two

  • OS
    11 Pro 23H2 OS build 22631.3672
    Computer type
    Laptop
    Manufacturer/Model
    Acer Swift SF114-34
    CPU
    Pentium Silver N6000 1.10GHz
    Memory
    4GB
    Screen Resolution
    1920 x 1080
    Hard Drives
    SSD
    Cooling
    fanless
    Internet Speed
    13Mbps
    Browser
    Brave, Edge or Firefox
    Antivirus
    Webroot Secure Anywhere
    Other Info
    System 3

    ASUS T100TA Transformer
    Processor Intel Atom Z3740 @ 1.33GHz
    Installed RAM 2.00 GB (1.89 GB usable)
    System type 32-bit operating system, x64-based processor

    Edition Windows 10 Home
    Version 22H2 build 19045.3570
  • Operating System
    Windows 11 Pro 23H2 22631.2506
    Computer type
    Laptop
    Manufacturer/Model
    HP Mini 210-1090NR PC (bought in late 2009!)
    CPU
    Atom N450 1.66GHz
    Memory
    2GB
Not by me! Surely, transparent means hiding nothing? I think y'all confuse transparent with invisible.
Regrettably, not everybody has your evidently keen insight to the English Language.
 

My Computer

System One

  • OS
    Windows 10 Pro + others in VHDs
    Computer type
    Laptop
    Manufacturer/Model
    ASUS Vivobook 14
    CPU
    I7
    Motherboard
    Yep, Laptop has one.
    Memory
    16 GB
    Graphics Card(s)
    Integrated Intel Iris XE
    Sound Card
    Realtek built in
    Monitor(s) Displays
    N/A
    Screen Resolution
    1920x1080
    Hard Drives
    1 TB Optane NVME SSD, 1 TB NVME SSD
    PSU
    Yep, got one
    Case
    Yep, got one
    Cooling
    Stella Artois
    Keyboard
    Built in
    Mouse
    Bluetooth , wired
    Internet Speed
    72 Mb/s :-(
    Browser
    Edge mostly
    Antivirus
    Defender
    Other Info
    TPM 2.0
Typing encryption in the search bar brings up the settings for device encryption and bit locker. Seems easier than editing the registry.
Thanks, I forgot all about this topic during OOBE. Sorry, Spartan.

I had made a system image before OOBE using my Acronis USB but could not make one after OOBE because the drive was reported as encrypted by Bitlocker.
- I have enabled S3 Sleep but it had used S0 Modern standby when OOBE was first completed so that was when & why the encryption happened.
- I then went to Settings, Privacy & security, Device encryption and turned it off.
- Despite a warning that it might take a long time, it has decrypted the disk within a couple of minutes.
And now it is happily making a new post-OOBE system image.

Added later: Which turned out not to be able to use S3 Sleep after all and is being returned. Quite disconcertingly, its PowerCfg -a results confirmed that the Registry edit had enabled S3 Sleep. It was only when I tried using it that I found out that the computer froze instead of going into S3 Sleep.


All the best,
Denis
 
Last edited:

My Computer

System One

  • OS
    Windows 11 Home x64 Version 23H2 Build 22631.3447
Back
Top Bottom