How to prevent automatic drive encryption in Windows 11?

TairikuOkami · Apr 15, 2023

Not sure, if it is possible in OOBE, but disabling/removing bitlocker/EFS services should prevent it 100%.

I do this post-setup: Disable decryption and decrypt, in case the disk is already encrypted.

Code:

reg add "HKLM\System\CurrentControlSet\Control\BitLocker" /v "PreventDeviceEncryption" /t REG_DWORD /d "1" /f
fsutil behavior set disableencryption 1
manage-bde -off C:
manage-bde -off D:
cipher /d /s:C:\
sc config EFS start= disabled
sc config BDESVC start= disabled

ThrashZone · Dec 4, 2023

TairikuOkami said:
Not sure, if it is possible in OOBE, but disabling/removing bitlocker/EFS services should prevent it 100%.

I do this post-setup: Disable decryption and decrypt, in case the disk is already encrypted.

Code:

reg add "HKLM\System\CurrentControlSet\Control\BitLocker" /v "PreventDeviceEncryption" /t REG_DWORD /d "1" /f fsutil behavior set disableencryption 1 manage-bde -off C: manage-bde -off D: cipher /d /s:C:\ sc config EFS start= disabled sc config BDESVC start= disabled

Hi,
Hate to be a necromunger but what if there is E & F partition ?

Code:

reg add "HKLM\System\CurrentControlSet\Control\BitLocker" /v "PreventDeviceEncryption" /t REG_DWORD /d "1" /f
fsutil behavior set disableencryption 1
manage-bde -off C:
manage-bde -off D:
manage-bde -off E:
manage-bde -off F:
cipher /d /e /f /s:C:\
sc config EFS start= disabled
sc config BDESVC start= disabled

TairikuOkami · Dec 4, 2023

ThrashZone said:
but what if there is E & F partition ?

Your posted code will do. cipher is only used do decrypt EFS files, I do not think it is enabled by default anymore.

ThrashZone · Dec 4, 2023

TairikuOkami said:
Your posted code will do. cipher is only used do decrypt EFS files, I do not think it is enabled by default anymore.

Hi,
Dude on TPU got bitlocked installing 23h2 :eek:

Microsoft re enables bitlocker, locked my computer and deleted the windows hello pin after installing 23H2.

brother bought a new laptop, got his old one and wiped it. fresh W11 Pro installation, manually disabled bitlocker and checked a couple times that it is actually disabled. (wasn't the first time i found it to be enabled again after a couple weeks) yesterday it installed 23H2 and it restarted for...

www.techpowerup.com

Marie SWE · Dec 6, 2023

The easiest way... and the safest way to always prevent windows update to screw up things (to restart things or reinstall things)... Is to look up the key files the program need to even be able to run.... Delete them, then create a new Ghost files in the exactly same name and then make sure the privileges for write/edit etc.. is set to you the user ONLY.. Then change the file to write protected.
The program can not run as it is an empty file... The system or the trusted installer can not replace the file with a working one, as it get access denied... and the program is dead forever...... or until you the user is delating the ghost-file and you let the system repair the program.

ThrashZone · Dec 12, 2023

Hi,
This is getting interesting OEM's are okaying activating bitlocker

God I love new rufus and looks like I'll never stop using it but will never get a large build like 23h2 from windows update

Microsoft re enables bitlocker, locked my computer and deleted the windows hello pin after installing 23H2.

Hi, Yeah can't let your guard down for even a second Funny I don't even have win-10 drivers form my new lappy. Have to contact acer and ask why. and why tpm access is locked to. But installing green 23h2 what were you thinking :confused:

www.techpowerup.com

Try3 · Dec 12, 2023

ThrashZone said:
OEM's are okaying activating bitlocker

That's device encryption not Bitlocker.
The two are different things.

All the best,
Denis

Megahertz · Dec 12, 2023

Try3 said:
That's device encryption not Bitlocker.
The two are different things.

All the best,
Denis

I had a bad experience with device encryption that I didn't know it could exist on Win 11 Home.
When you open Disk Manager it shows the partitions as Bitlocker encrypted.

All partitions are Bitlocker on Win 11 Home SL?

Just made a clean install on a M.2 NVMe on a Samsung Book X30 It says that all data partitions are Bitlocker encrypted. - Its a Win 11 Home SL -Never set any Bitlocker encryption. What´s going on?

www.elevenforum.com

Try3 · Dec 12, 2023

Luis,

Yes, device encryption has caused a lot of concern. There were quite a few threads about it in the Spring & Summer.

Unlike Bitlocker, you can just go to
Settings, Privacy & security, Device encryption
and turn it off without any password being involved at any stage.
Turn On or Off Device Encryption - ElevenForumTutorials
In the two Windows 11 Home computers in which I've experienced Device encryption upon Windows installation, turning it off caused a warning that it might take a long time but it actually only took a couple of minutes [my Earl Grey wasn't properly brewed].

There were suggestions in at least one ElevenForum thread that a particular Registry edit during installation would prevent unsolicited Device encryption but it didn't work in any of my cases.

All the best,
Denis

ThrashZone · Dec 16, 2023

Try3 said:
That's device encryption not Bitlocker.
The two are different things.

All the best,
Denis

Hi,
OEM and ms forcing the feature and the result is the same/ bitlocker used and ms forcing ms account usage to upload bitlocker key to.
Not exactly different at all.

Feel free to pick up from here

Microsoft re enables bitlocker, locked my computer and deleted the windows hello pin after installing 23H2.

I have a better one. I moved my MP700 to a different M2 slot and now Gamepass is asking me to reinstall Forza 8. I removed a 32gig kit from my motherboard and put in a 64gig kit and had to use phone to recert my key.

www.techpowerup.com

Try3 · Dec 17, 2023

Mike,

I do not need to look in your link to know that Device encryption is not the same as Bitlocker.
That link's claim that a key had to be uploaded somewhere is incorrect.
Device encryption does not involve any key.
You just decrypt without one.
- I have done this several times this year.
- The tutorial also makes this clear.

Merry Christmas,
Denis

JamJam · Mar 28, 2025

garlin said:
Rufus is using the answer file method of passing a registry flag, instead of updating the key directly in the install WIM's registry hive.
You can integrate it into the image, so Windows can't enable BitLocker on first boot.

1. DISM mount your WIM image.
2. reg load HKLM\TEMP C:\mountpath\Windows\System32\config\SYSTEM
3. reg add HKLM\TEMP\CurrentControlSet\Control\BitLocker /v PreventDeviceEncryption /t REG_DWORD /d 1 /f
4. reg unload HKLM\TEMP
5. DISM commit your changes.

Disable BitLocker automatic device encryption

Thanks Garlin to provide information

Registry Entry as a reg file Tested on Windows 11 24H2 LTSC Initial Image

Code:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\CurrentControlSet\Control\BitLocker]

"PreventDeviceEncryption"=dword:00000001

Import reg file to the deployed offline image which is ready to insall or direct import to install.wim
It still works for Local Users Account (Administrator) with unattend file which enabled SkipMachineOOBE and SkipUserOOBE.

Device Encryption is disabled by default when system is installed compelete.
Device Encryption Switch is OFF by default.
No bitlocker or encryption information displayed on Disk Management Drive List Status.

Haven't Test for OOBE with Microsoft Account online mode.

JamJam · Mar 29, 2025

JamJam said:
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\CurrentControlSet\Control\BitLocker] "PreventDeviceEncryption"=dword:00000001

Correction:

Code:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\BitLocker]

"PreventDeviceEncryption"=dword:00000001

REDDLINE · Aug 5, 2025

I need to complete an In-Place Upgrade from Windows 11 24H2 to Windows 11 24H2, my system has TPM disabled and Bitlocker disabled, it is capable of TPM but it is just disabled.
Current Bitlocker is also disabled, but if I complete the In-Place Upgrade will it enable Bitlocker?
If it does, what can i do to prevent it from happening?

Originally I installed Windows 11 with unattended that just removed a few things like Clipchamp, Solitaire Collection, and to change 8.3 short file names during WinPE to have Long file names, and a few other things like including auto connecting to my wifi, partitioning, allow hidden files and file extensions, I dindt add any custom scripts or anything though, everything else is unchanged.

Any info would be appreciated, thank you.

Edit: Additionally, I have Secureboot currently enabled, but I can disable it or re-enable it without any issues
The main issue that I am having and why I am wanting to do an In-Place Upgrade, is because update KB5062553 installed a few days ago,, immediately after the update one it restarted I would have nonstop stutters in any game, jarring stutters that happen 2 seconds apart nonstop. I have removed this update through windows, but now its still causing the stutters. At that time, before or after, nothing else was installed, no other software was added or uninstalled.
Looking around further it seems like the KB5062553 update can break the component store sometimes, so i ran:

scf /scannow
Dism /Online /Cleanup-Image /CheckHealth
Dism /Online /Cleanup-Image /ScanHealth
Dism /Online /Cleanup-Image /RestoreHealth

But the problem still persisted, reading around and a few people resolved the issue with In-Place Upgrade, which is what I am trying to complete.

I have also done a clean reinstall with DDU of GPU drivers and used 3 different GPU drivers versions with the same issue, updated AM5 Chipset drivers, and updated all other drivers, or reinstalled the most recent drivers.

BrianInEngland · Aug 5, 2025

I don't have Device encryption and when I did a clean install of 24H2 recently Bitlocker was NOT enabled

Megahertz · Aug 5, 2025

BrianInEngland said:
I don't have Device encryption and when I did a clean install of 24H2 recently Bitlocker was NOT enabled

If you did a clean install using MS MCT it probably has Device encryption.

Check BitLocker Drive Encryption Status of Drive in Windows 11

This tutorial will show you how to check the current status if BitLocker Drive Encryption for a drive in Windows 10 and Windows 11. BitLocker Drive Encryption is a data protection feature that integrates with the operating system and addresses the threats of data theft or exposure from lost...

www.elevenforum.com

Find BitLocker Recovery Key in Windows 11

This tutorial will show you how to find your BitLocker recovery key for a drive in Windows 10 and Windows 11. BitLocker Drive Encryption is a data protection feature that integrates with the operating system and addresses the threats of data theft or exposure from lost, stolen, or...

www.elevenforum.com

Turn On or Off Device Encryption in Windows 11

This tutorial will show you how to turn on or off device encryption on a Windows 11 PC. Device encryption is a Windows feature that enables BitLocker encryption automatically for the Operating System drive and fixed drives. It’s particularly beneficial for everyday users who want to ensure...

www.elevenforum.com

REDDLINE · Aug 5, 2025

Shows mine is already disabled, so i can do a windows 11 24H2 In-Place Upgrade on my current Windows 11 24H2 and it wont enableBitlocker or drive encryption after the upgrade is complete?

Megahertz · Aug 5, 2025

REDDLINE said:
Shows mine is already disabled, so i can do a windows 11 24H2 In-Place Upgrade on my current Windows 11 24H2 and it wont enableBitlocker or drive encryption after the upgrade is complete?

I suggest you check after the Win 11 24H2 In-Place Upgrade

hsehestedt · Aug 5, 2025

An UPGRADE should not trigger drive encryption. Only a clean install.

TraderGary · Aug 5, 2025

kelper said:
Not by me! Surely, transparent means hiding nothing? I think y'all confuse transparent with invisible.

Ah semantics. You Scots don't even know how to spell the word color!

How to prevent automatic drive encryption in Windows 11?

Microsoft 365 Basic

My Computer My Computer

At a glance

Minor Threat

My Computer My Computer

At a glance

Microsoft 365 Basic

My Computer My Computer

At a glance

Minor Threat

My Computer My Computer

At a glance

I almost never bite.......

My Computers My Computers

At a glance

At a glance

Minor Threat

My Computer My Computer

At a glance

Well-known member

My Computer My Computer

At a glance

Wish to be flying

My Computers My Computers

At a glance

At a glance

Well-known member

My Computer My Computer

At a glance

Minor Threat

My Computer My Computer

At a glance

Well-known member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

Active member

My Computer My Computer

At a glance

Well-known member

My Computer My Computer

At a glance

Wish to be flying

My Computers My Computers

At a glance

At a glance

Active member

Attachments

My Computer My Computer

At a glance

Wish to be flying

My Computers My Computers

At a glance

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Stock Market Wizard

My Computers My Computers

At a glance

At a glance

Similar threads

My Computer

My Computer

My Computer

My Computer

My Computers

My Computer

My Computer

My Computers

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computers

My Computer

My Computers

My Computers

My Computers