Is there a way to prevent Windows from activating BitLocker automatically?


Spartan

Active member
Member
VIP
Local time
6:56 PM
Posts
80
Location
Dubai
OS
Windows 11 Pro for Workstations
This is annoying the living crap out of me. Every time I install Windows 11 Pro or 10 Pro recently even, the first thing I noticed upon logging in is Windows is encrypting my disk which I know how to stop and disable but is there a way to prevent this from happening automatically so I don't need to manually stop it for every machine I install Windows on?
 

My Computers

System One System Two

  • OS
    Windows 11 Pro for Workstations
    Computer type
    Laptop
    Manufacturer/Model
    Alienware m15 R7
    CPU
    AMD Ryzen 9 6900HX
    Memory
    64 GB 4800 MHz DDR5 RAM
    Graphics Card(s)
    GeForce RTX 3080 Ti 16 GB GDDR6
    Sound Card
    Realtek Audio
    Monitor(s) Displays
    15.6" QHD 240Hz 2ms 400-Nit Screen + Alienware 38 Curved Gaming Monitor AW3821DW
    Screen Resolution
    WQHD (3440 x 1440)
    Hard Drives
    Western Digital PC SN810 1TB SSD + Toshiba Kioxia KXG70PN84T094TB 4TB SSD
    PSU
    240W AC Power Adapter (supports 100-240V)
    Cooling
    Noctua NT-H1 + Fujipoly Extreme Thermal Pads
    Keyboard
    Alienware Low-Profile RGB Mechanical Gaming Keyboard AW510K
    Mouse
    Logitech MX Anywhere 3
    Internet Speed
    1 GBPS Down / 300 MBPS Up
    Browser
    Google Chrome
    Antivirus
    ESET NOD32 Antivirus
  • Operating System
    Windows 11 Pro for Workstations
    Computer type
    Laptop
    Manufacturer/Model
    Dell XPS 13 9310
    CPU
    i7-1185G7
    Motherboard
    Intel Tiger Lake-UP3 IMC Chipset
    Memory
    32 GB 4267MHz Quad LPDDR4 SDRAM
    Graphics card(s)
    Intel Iris Xe Graphics
    Sound Card
    Realtek Audio
    Monitor(s) Displays
    13.4" OLED 3.5K 400-Nit Screen + Alienware 38 Curved Gaming Monitor AW3821DW
    Screen Resolution
    WQHD (3440 x 1440)
    Hard Drives
    Samsung PM9A1 2TB SSD
    PSU
    230W AC Power Adapter (supports 100-240V)
    Cooling
    Noctua NT-H1 + Fujipoly Extreme Thermal Pads
    Mouse
    Logitech MX Anywhere 3
    Keyboard
    Alienware Low-Profile RGB Mechanical Gaming Keyboard AW510K
    Internet Speed
    1 GBPS Down / 300 MBPS Up
    Browser
    Google Chrome
    Antivirus
    ESET NOD32 Antivirus

hsehestedt

Well-known member
Power User
VIP
Local time
9:56 AM
Posts
705
Location
Texas, USA
OS
Windows 11 21H2
Are you in a domain environment where this might be getting pushed to your system via a policy?

I have never ever seen a standalone machine simply start BitLocking a drive on it's own.
 

My Computers

System One System Two

  • OS
    Windows 11 21H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Home Built
    CPU
    Intel i7-11700K
    Motherboard
    ASUS Prime Z590-A
    Memory
    128GB Crucial Ballistix 3200MHz DRAM
    Graphics Card(s)
    No GPU - CPU graphics only (for now)
    Sound Card
    Realtek (on motherboard)
    Monitor(s) Displays
    HP Envy 32
    Screen Resolution
    2560 x 1440
    Hard Drives
    1 x 1TB NVMe Gen 4 x 4 SSD
    1 x 2TB NVMe Gen 3 x 4 SSD
    2 x 512GB 2.5" SSDs
    2 x 8TB HD
    PSU
    Corsair HX850i
    Case
    Corsair iCue 5000X RGB
    Cooling
    Noctua NH-D15 chromax.black cooler + 10 case fans
    Keyboard
    CODE backlit mechanical keyboard
    Mouse
    Logitech MX Master 3
    Internet Speed
    300Mb down / 20Mb up
    Browser
    Chromium Edge
    Antivirus
    Windows Defender
    Other Info
    Additional options installed:
    WiFi 6E PCIe adapter
    ASUS ThunderboltEX 4 PCIe adapter
  • Operating System
    Windows 11 21H2
    Computer type
    Laptop
    Manufacturer/Model
    HP Spectre x360 15-BL012DX
    CPU
    Intel i7-7500U
    Memory
    32GB
    Graphics card(s)
    Dual Intel HD 620 and Nvidia GeForce 940MX
    Sound Card
    Built-in Realtek HD Audio
    Monitor(s) Displays
    4k 15-inch
    Screen Resolution
    4k (3840 x 2160)
    Hard Drives
    1TB Seagate FireCuda 510 NVMe SSD
    Internet Speed
    300Mb down / 20Mb up
    Browser
    Chromium Edge
    Antivirus
    Windows Defender
    Other Info
    RAM Upgraded from 16GB to 32GB WiFi Upgraded from WiFi 5 to WiFi 6 SSD upgraded from 512GB NVMe SSD to 1TB Seagate FireCuda 510 NVMe SSD

Spartan

Active member
Member
VIP
Thread Starter
Local time
6:56 PM
Posts
80
Location
Dubai
OS
Windows 11 Pro for Workstations
Are you in a domain environment where this might be getting pushed to your system via a policy?

I have never ever seen a standalone machine simply start BitLocking a drive on it's own.
No man, at home.
Happens to me on every one of my machines that has an SSD and TPM support. This has started recently with the last build of Windows 10 and now on 11 obviously. Only happens on Windows Pro or Enterprise, not on Home edition installs
 

My Computers

System One System Two

  • OS
    Windows 11 Pro for Workstations
    Computer type
    Laptop
    Manufacturer/Model
    Alienware m15 R7
    CPU
    AMD Ryzen 9 6900HX
    Memory
    64 GB 4800 MHz DDR5 RAM
    Graphics Card(s)
    GeForce RTX 3080 Ti 16 GB GDDR6
    Sound Card
    Realtek Audio
    Monitor(s) Displays
    15.6" QHD 240Hz 2ms 400-Nit Screen + Alienware 38 Curved Gaming Monitor AW3821DW
    Screen Resolution
    WQHD (3440 x 1440)
    Hard Drives
    Western Digital PC SN810 1TB SSD + Toshiba Kioxia KXG70PN84T094TB 4TB SSD
    PSU
    240W AC Power Adapter (supports 100-240V)
    Cooling
    Noctua NT-H1 + Fujipoly Extreme Thermal Pads
    Keyboard
    Alienware Low-Profile RGB Mechanical Gaming Keyboard AW510K
    Mouse
    Logitech MX Anywhere 3
    Internet Speed
    1 GBPS Down / 300 MBPS Up
    Browser
    Google Chrome
    Antivirus
    ESET NOD32 Antivirus
  • Operating System
    Windows 11 Pro for Workstations
    Computer type
    Laptop
    Manufacturer/Model
    Dell XPS 13 9310
    CPU
    i7-1185G7
    Motherboard
    Intel Tiger Lake-UP3 IMC Chipset
    Memory
    32 GB 4267MHz Quad LPDDR4 SDRAM
    Graphics card(s)
    Intel Iris Xe Graphics
    Sound Card
    Realtek Audio
    Monitor(s) Displays
    13.4" OLED 3.5K 400-Nit Screen + Alienware 38 Curved Gaming Monitor AW3821DW
    Screen Resolution
    WQHD (3440 x 1440)
    Hard Drives
    Samsung PM9A1 2TB SSD
    PSU
    230W AC Power Adapter (supports 100-240V)
    Cooling
    Noctua NT-H1 + Fujipoly Extreme Thermal Pads
    Mouse
    Logitech MX Anywhere 3
    Keyboard
    Alienware Low-Profile RGB Mechanical Gaming Keyboard AW510K
    Internet Speed
    1 GBPS Down / 300 MBPS Up
    Browser
    Google Chrome
    Antivirus
    ESET NOD32 Antivirus

TraderGary

Stock Market Wizard
Member
VIP
Local time
10:56 AM
Posts
334
Location
Atlanta, GA, USA
OS
Windows 11 Pro
I see you're using Windows 11 Pro for Workstations. If I'm not mistaken, the default is to have BitLocker turned ON.
 

My Computer

System One

  • OS
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Dell XPS 15 9510 OLED
    CPU
    11th Gen i9 -11900H
    Memory
    32 GB 3200 MHz DDR4
    Graphics Card(s)
    NVIDIA® GeForce® RTX 3050Ti
    Monitor(s) Displays
    15.6" OLED Infinity Edge Touch
    Screen Resolution
    16:10 Aspect Ratio (3456 x 2160)
    Hard Drives
    1 Terabyte M.2 PCIe NVMe SSD
    2 Thunderbolt™ 4 (USB Type-C™)
    1 USB 3.2 Gen 2 (USB Type-C™)
    SD Card Reader (SD, SDHC, SDXC)
    Mouse
    Logitech MX Master 3
    Internet Speed
    700 Mbps, 24 Mbps
    Browser
    Microsoft Edge (Chromium)
    Antivirus
    Microsoft Windows Security (Defender)
    Other Info
    Microsoft 365 subscription
    Microsoft OneDrive 1TB Cloud
    Microsoft File History

    Interactive Brokers Trader Workstation
    Lightroom/Photoshop subscription
    DaVinci Resolve Studio
    Microsoft Visual Studio

paulhatton

Member
Local time
3:56 PM
Posts
47
OS
Windows 11
Actually the same happened to me on my Windows 11 Home edition yesterday when my separate I terabyte HDD drive was invisible to start with after a fresh genuine WIndows 11 install from iso so I have to unencrypt t as well as assign a new drive letter to it.
This has happened on a number of occasions and no logic behind it; totally random.
 

My Computer

System One

  • OS
    Windows 11

Spartan

Active member
Member
VIP
Thread Starter
Local time
6:56 PM
Posts
80
Location
Dubai
OS
Windows 11 Pro for Workstations
This has happened on a number of occasions and no logic behind it; totally random.

It is and is freakin' annoying man! See I work in a computer company and we have a service where we teak and tune the computers of customers. I have to do this decrypting for every freakin' laptop that's why I'm saying this is annoying and not particular to my laptop. Happens 90% of the time now and sometimes it doesn't as if Windows has a mind of its own.

I wish there was entry or script to have in the Windows install Flash Disk to disable Encryption completely.
 

My Computers

System One System Two

  • OS
    Windows 11 Pro for Workstations
    Computer type
    Laptop
    Manufacturer/Model
    Alienware m15 R7
    CPU
    AMD Ryzen 9 6900HX
    Memory
    64 GB 4800 MHz DDR5 RAM
    Graphics Card(s)
    GeForce RTX 3080 Ti 16 GB GDDR6
    Sound Card
    Realtek Audio
    Monitor(s) Displays
    15.6" QHD 240Hz 2ms 400-Nit Screen + Alienware 38 Curved Gaming Monitor AW3821DW
    Screen Resolution
    WQHD (3440 x 1440)
    Hard Drives
    Western Digital PC SN810 1TB SSD + Toshiba Kioxia KXG70PN84T094TB 4TB SSD
    PSU
    240W AC Power Adapter (supports 100-240V)
    Cooling
    Noctua NT-H1 + Fujipoly Extreme Thermal Pads
    Keyboard
    Alienware Low-Profile RGB Mechanical Gaming Keyboard AW510K
    Mouse
    Logitech MX Anywhere 3
    Internet Speed
    1 GBPS Down / 300 MBPS Up
    Browser
    Google Chrome
    Antivirus
    ESET NOD32 Antivirus
  • Operating System
    Windows 11 Pro for Workstations
    Computer type
    Laptop
    Manufacturer/Model
    Dell XPS 13 9310
    CPU
    i7-1185G7
    Motherboard
    Intel Tiger Lake-UP3 IMC Chipset
    Memory
    32 GB 4267MHz Quad LPDDR4 SDRAM
    Graphics card(s)
    Intel Iris Xe Graphics
    Sound Card
    Realtek Audio
    Monitor(s) Displays
    13.4" OLED 3.5K 400-Nit Screen + Alienware 38 Curved Gaming Monitor AW3821DW
    Screen Resolution
    WQHD (3440 x 1440)
    Hard Drives
    Samsung PM9A1 2TB SSD
    PSU
    230W AC Power Adapter (supports 100-240V)
    Cooling
    Noctua NT-H1 + Fujipoly Extreme Thermal Pads
    Mouse
    Logitech MX Anywhere 3
    Keyboard
    Alienware Low-Profile RGB Mechanical Gaming Keyboard AW510K
    Internet Speed
    1 GBPS Down / 300 MBPS Up
    Browser
    Google Chrome
    Antivirus
    ESET NOD32 Antivirus

Bree

Well-known member
Pro User
VIP
Local time
3:56 PM
Posts
2,737
Location
S/E England, UK
OS
Windows 11 Home
I have never ever seen a standalone machine simply start BitLocking a drive on it's own.
I have. A clean install of 10 or 11 Pro on a machine with a TPM will automatically encrypt the drive by default. I have also seen this on a Dell laptop that came with its OEM installed W10 Pro, and have also seen this on another Dell laptop after resetting it with its official Dell factory reset ISO (which installed Windows 10 Pro version 1809).

In all cases Bitlocker is not turned on though, but the drives are encrypted all the same.
 

My Computers

System One System Two

  • OS
    Windows 11 Home
    Computer type
    Laptop
    Manufacturer/Model
    Acer Aspire 3 A315-23
    CPU
    AMD Athlon Silver 3050U
    Memory
    8GB
    Graphics Card(s)
    Radeon Graphics
    Monitor(s) Displays
    laptop screen
    Screen Resolution
    1366x768 native resolution, up to 2560x1440 with Radeon Virtual Super Resolution
    Hard Drives
    1TB HDD
    Browser
    Edge, Firefox
    Antivirus
    Defender
    Other Info
    fully 'Windows 11 ready' laptop. Windows 10 C: partition migrated from my old unsupported 'main machine' then upgraded to 11. A test migration ran Insider builds for 2 months. When 11 was released on 5th October it was re-imaged back to 10 and was offered the upgrade in Windows Update on 20th October.


    My SYSTEM THREE is a Dell Latitude 5410, i7-10610U, 32GB RAM, 512GB ssd, Windows 11 Pro.
  • Operating System
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Dell Lattitude E4310
    CPU
    i5 M 520
    Motherboard
    0T6M8G
    Memory
    4GB
    Screen Resolution
    1366x768
    Hard Drives
    500GB HDD
    Browser
    Firefox, Edge
    Antivirus
    Defender
    Other Info
    unsupported machine: Legacy bios, MBR, TPM 1.2, upgraded from W10 to W11 using W10/W11 hybrid install media workaround.


    My SYSTEM THREE is a Dell Latitude 5410, i7-10610U, 32GB RAM, 512GB ssd, Windows 11 Pro.

paulhatton

Member
Local time
3:56 PM
Posts
47
OS
Windows 11
yeah I always back up my "D drive" to an external hard drive before ever attempting a fresh install and yet with the same Windows 11 iso from Microsoft on the same Dell Inspiron 7700 AIO factory spec it has NEVER ever gone the same any time whenever I have reinstalled the system at all. Once both hard drives were encrypted no idea how and I was left with an operating system but with no initial way to access either hard drive weird or what !
 

My Computer

System One

  • OS
    Windows 11

TraderGary

Stock Market Wizard
Member
VIP
Local time
10:56 AM
Posts
334
Location
Atlanta, GA, USA
OS
Windows 11 Pro
I just checked my new Dell XPS 15 9510.
BitLocker was turned ON.
I'll be damned!
I just turned it OFF.

What does BitLocker do to disk speed?
 

My Computer

System One

  • OS
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Dell XPS 15 9510 OLED
    CPU
    11th Gen i9 -11900H
    Memory
    32 GB 3200 MHz DDR4
    Graphics Card(s)
    NVIDIA® GeForce® RTX 3050Ti
    Monitor(s) Displays
    15.6" OLED Infinity Edge Touch
    Screen Resolution
    16:10 Aspect Ratio (3456 x 2160)
    Hard Drives
    1 Terabyte M.2 PCIe NVMe SSD
    2 Thunderbolt™ 4 (USB Type-C™)
    1 USB 3.2 Gen 2 (USB Type-C™)
    SD Card Reader (SD, SDHC, SDXC)
    Mouse
    Logitech MX Master 3
    Internet Speed
    700 Mbps, 24 Mbps
    Browser
    Microsoft Edge (Chromium)
    Antivirus
    Microsoft Windows Security (Defender)
    Other Info
    Microsoft 365 subscription
    Microsoft OneDrive 1TB Cloud
    Microsoft File History

    Interactive Brokers Trader Workstation
    Lightroom/Photoshop subscription
    DaVinci Resolve Studio
    Microsoft Visual Studio

hsehestedt

Well-known member
Power User
VIP
Local time
9:56 AM
Posts
705
Location
Texas, USA
OS
Windows 11 21H2
I have. A clean install of 10 or 11 Pro on a machine with a TPM will automatically encrypt the drive by default. I have also seen this on a Dell laptop that came with its OEM installed W10 Pro, and have also seen this on another Dell laptop after resetting it with its official Dell factory reset ISO (which installed Windows 10 Pro version 1809).

In all cases Bitlocker is not turned on though, but the drives are encrypted all the same.
Every single machine I have has a physical TPM which is enabled in the BIOS with the exception of my 10+ year old laptop. BitLocker does not self-enable on ANY of those systems. Ever. Period. I had to manually choose to BitLocker encrypt my drives every single time.

The one and only exception that I can see to this is possibly if you have self-encrypting drives installed in your system. I remember a discussion a few years ago about some rather severe vulnerabilities in some of those drives and I think Microsoft no longer "trusted" those drives. It may be that they used BitLocker to override the self-encryption on those drives but that is something I'll have to research.
 

My Computers

System One System Two

  • OS
    Windows 11 21H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Home Built
    CPU
    Intel i7-11700K
    Motherboard
    ASUS Prime Z590-A
    Memory
    128GB Crucial Ballistix 3200MHz DRAM
    Graphics Card(s)
    No GPU - CPU graphics only (for now)
    Sound Card
    Realtek (on motherboard)
    Monitor(s) Displays
    HP Envy 32
    Screen Resolution
    2560 x 1440
    Hard Drives
    1 x 1TB NVMe Gen 4 x 4 SSD
    1 x 2TB NVMe Gen 3 x 4 SSD
    2 x 512GB 2.5" SSDs
    2 x 8TB HD
    PSU
    Corsair HX850i
    Case
    Corsair iCue 5000X RGB
    Cooling
    Noctua NH-D15 chromax.black cooler + 10 case fans
    Keyboard
    CODE backlit mechanical keyboard
    Mouse
    Logitech MX Master 3
    Internet Speed
    300Mb down / 20Mb up
    Browser
    Chromium Edge
    Antivirus
    Windows Defender
    Other Info
    Additional options installed:
    WiFi 6E PCIe adapter
    ASUS ThunderboltEX 4 PCIe adapter
  • Operating System
    Windows 11 21H2
    Computer type
    Laptop
    Manufacturer/Model
    HP Spectre x360 15-BL012DX
    CPU
    Intel i7-7500U
    Memory
    32GB
    Graphics card(s)
    Dual Intel HD 620 and Nvidia GeForce 940MX
    Sound Card
    Built-in Realtek HD Audio
    Monitor(s) Displays
    4k 15-inch
    Screen Resolution
    4k (3840 x 2160)
    Hard Drives
    1TB Seagate FireCuda 510 NVMe SSD
    Internet Speed
    300Mb down / 20Mb up
    Browser
    Chromium Edge
    Antivirus
    Windows Defender
    Other Info
    RAM Upgraded from 16GB to 32GB WiFi Upgraded from WiFi 5 to WiFi 6 SSD upgraded from 512GB NVMe SSD to 1TB Seagate FireCuda 510 NVMe SSD

hsehestedt

Well-known member
Power User
VIP
Local time
9:56 AM
Posts
705
Location
Texas, USA
OS
Windows 11 21H2
I just checked my new Dell XPS 15 9510.
BitLocker was turned ON.
I'll be damned!
I just turned it OFF.

What does BitLocker do to disk speed?
On modern hardware, it does nothing to the speed. Maybe a 1 or 2 percent performance hit on a bad day.
 

My Computers

System One System Two

  • OS
    Windows 11 21H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Home Built
    CPU
    Intel i7-11700K
    Motherboard
    ASUS Prime Z590-A
    Memory
    128GB Crucial Ballistix 3200MHz DRAM
    Graphics Card(s)
    No GPU - CPU graphics only (for now)
    Sound Card
    Realtek (on motherboard)
    Monitor(s) Displays
    HP Envy 32
    Screen Resolution
    2560 x 1440
    Hard Drives
    1 x 1TB NVMe Gen 4 x 4 SSD
    1 x 2TB NVMe Gen 3 x 4 SSD
    2 x 512GB 2.5" SSDs
    2 x 8TB HD
    PSU
    Corsair HX850i
    Case
    Corsair iCue 5000X RGB
    Cooling
    Noctua NH-D15 chromax.black cooler + 10 case fans
    Keyboard
    CODE backlit mechanical keyboard
    Mouse
    Logitech MX Master 3
    Internet Speed
    300Mb down / 20Mb up
    Browser
    Chromium Edge
    Antivirus
    Windows Defender
    Other Info
    Additional options installed:
    WiFi 6E PCIe adapter
    ASUS ThunderboltEX 4 PCIe adapter
  • Operating System
    Windows 11 21H2
    Computer type
    Laptop
    Manufacturer/Model
    HP Spectre x360 15-BL012DX
    CPU
    Intel i7-7500U
    Memory
    32GB
    Graphics card(s)
    Dual Intel HD 620 and Nvidia GeForce 940MX
    Sound Card
    Built-in Realtek HD Audio
    Monitor(s) Displays
    4k 15-inch
    Screen Resolution
    4k (3840 x 2160)
    Hard Drives
    1TB Seagate FireCuda 510 NVMe SSD
    Internet Speed
    300Mb down / 20Mb up
    Browser
    Chromium Edge
    Antivirus
    Windows Defender
    Other Info
    RAM Upgraded from 16GB to 32GB WiFi Upgraded from WiFi 5 to WiFi 6 SSD upgraded from 512GB NVMe SSD to 1TB Seagate FireCuda 510 NVMe SSD

hsehestedt

Well-known member
Power User
VIP
Local time
9:56 AM
Posts
705
Location
Texas, USA
OS
Windows 11 21H2
Ah hah!


 

My Computers

System One System Two

  • OS
    Windows 11 21H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Home Built
    CPU
    Intel i7-11700K
    Motherboard
    ASUS Prime Z590-A
    Memory
    128GB Crucial Ballistix 3200MHz DRAM
    Graphics Card(s)
    No GPU - CPU graphics only (for now)
    Sound Card
    Realtek (on motherboard)
    Monitor(s) Displays
    HP Envy 32
    Screen Resolution
    2560 x 1440
    Hard Drives
    1 x 1TB NVMe Gen 4 x 4 SSD
    1 x 2TB NVMe Gen 3 x 4 SSD
    2 x 512GB 2.5" SSDs
    2 x 8TB HD
    PSU
    Corsair HX850i
    Case
    Corsair iCue 5000X RGB
    Cooling
    Noctua NH-D15 chromax.black cooler + 10 case fans
    Keyboard
    CODE backlit mechanical keyboard
    Mouse
    Logitech MX Master 3
    Internet Speed
    300Mb down / 20Mb up
    Browser
    Chromium Edge
    Antivirus
    Windows Defender
    Other Info
    Additional options installed:
    WiFi 6E PCIe adapter
    ASUS ThunderboltEX 4 PCIe adapter
  • Operating System
    Windows 11 21H2
    Computer type
    Laptop
    Manufacturer/Model
    HP Spectre x360 15-BL012DX
    CPU
    Intel i7-7500U
    Memory
    32GB
    Graphics card(s)
    Dual Intel HD 620 and Nvidia GeForce 940MX
    Sound Card
    Built-in Realtek HD Audio
    Monitor(s) Displays
    4k 15-inch
    Screen Resolution
    4k (3840 x 2160)
    Hard Drives
    1TB Seagate FireCuda 510 NVMe SSD
    Internet Speed
    300Mb down / 20Mb up
    Browser
    Chromium Edge
    Antivirus
    Windows Defender
    Other Info
    RAM Upgraded from 16GB to 32GB WiFi Upgraded from WiFi 5 to WiFi 6 SSD upgraded from 512GB NVMe SSD to 1TB Seagate FireCuda 510 NVMe SSD

Spartan

Active member
Member
VIP
Thread Starter
Local time
6:56 PM
Posts
80
Location
Dubai
OS
Windows 11 Pro for Workstations
What does BitLocker do to disk speed?
Had I had not owned a Mac computer before, I would've never known. I had a MacBook Pro 16 last year and when you first go through the initial setup wizard, it asks you of you want to encrypt the disks for security which I stupidly did. I started using MacOS for the first time and everything was jerky and slow I thought that's how it is but knew something was off as it didn't coincide with all the online reviews I saw. Boot time was slow, system snappiness was not there. I then thought of turning off encryption and I swear it's like I just bought a new machine! Everything I described changed 180 degrees.

Same goes with Windows, I know how fast and snappy a new computer is because I deal with them every day for years. Only recently had I started noticing something was seriously wrong and when I checked, disk encryption was on and the moment you turn it off everything comes back to life.

Not to mention, we've had hundreds of tech support tickets of users who had lost their data after they formatted their C: partition thinking everything was safe on D: After the format, they had no way of accessing their old encrypted data as they didn't have the backup key.

This is a serious issue and Microsoft has no right enabling Encryption by default without the user giving consent and knowing what he's getting into.
 

My Computers

System One System Two

  • OS
    Windows 11 Pro for Workstations
    Computer type
    Laptop
    Manufacturer/Model
    Alienware m15 R7
    CPU
    AMD Ryzen 9 6900HX
    Memory
    64 GB 4800 MHz DDR5 RAM
    Graphics Card(s)
    GeForce RTX 3080 Ti 16 GB GDDR6
    Sound Card
    Realtek Audio
    Monitor(s) Displays
    15.6" QHD 240Hz 2ms 400-Nit Screen + Alienware 38 Curved Gaming Monitor AW3821DW
    Screen Resolution
    WQHD (3440 x 1440)
    Hard Drives
    Western Digital PC SN810 1TB SSD + Toshiba Kioxia KXG70PN84T094TB 4TB SSD
    PSU
    240W AC Power Adapter (supports 100-240V)
    Cooling
    Noctua NT-H1 + Fujipoly Extreme Thermal Pads
    Keyboard
    Alienware Low-Profile RGB Mechanical Gaming Keyboard AW510K
    Mouse
    Logitech MX Anywhere 3
    Internet Speed
    1 GBPS Down / 300 MBPS Up
    Browser
    Google Chrome
    Antivirus
    ESET NOD32 Antivirus
  • Operating System
    Windows 11 Pro for Workstations
    Computer type
    Laptop
    Manufacturer/Model
    Dell XPS 13 9310
    CPU
    i7-1185G7
    Motherboard
    Intel Tiger Lake-UP3 IMC Chipset
    Memory
    32 GB 4267MHz Quad LPDDR4 SDRAM
    Graphics card(s)
    Intel Iris Xe Graphics
    Sound Card
    Realtek Audio
    Monitor(s) Displays
    13.4" OLED 3.5K 400-Nit Screen + Alienware 38 Curved Gaming Monitor AW3821DW
    Screen Resolution
    WQHD (3440 x 1440)
    Hard Drives
    Samsung PM9A1 2TB SSD
    PSU
    230W AC Power Adapter (supports 100-240V)
    Cooling
    Noctua NT-H1 + Fujipoly Extreme Thermal Pads
    Mouse
    Logitech MX Anywhere 3
    Keyboard
    Alienware Low-Profile RGB Mechanical Gaming Keyboard AW510K
    Internet Speed
    1 GBPS Down / 300 MBPS Up
    Browser
    Google Chrome
    Antivirus
    ESET NOD32 Antivirus

Spartan

Active member
Member
VIP
Thread Starter
Local time
6:56 PM
Posts
80
Location
Dubai
OS
Windows 11 Pro for Workstations
Every single machine I have has a physical TPM which is enabled in the BIOS with the exception of my 10+ year old laptop. BitLocker does not self-enable on ANY of those systems. Ever. Period. I had to manually choose to BitLocker encrypt my drives every single time.

The one and only exception that I can see to this is possibly if you have self-encrypting drives installed in your system. I remember a discussion a few years ago about some rather severe vulnerabilities in some of those drives and I think Microsoft no longer "trusted" those drives. It may be that they used BitLocker to override the self-encryption on those drives but that is something I'll have to research.
90% of the time I see this happening to machines that have a Samsung SSD by the way.
 

My Computers

System One System Two

  • OS
    Windows 11 Pro for Workstations
    Computer type
    Laptop
    Manufacturer/Model
    Alienware m15 R7
    CPU
    AMD Ryzen 9 6900HX
    Memory
    64 GB 4800 MHz DDR5 RAM
    Graphics Card(s)
    GeForce RTX 3080 Ti 16 GB GDDR6
    Sound Card
    Realtek Audio
    Monitor(s) Displays
    15.6" QHD 240Hz 2ms 400-Nit Screen + Alienware 38 Curved Gaming Monitor AW3821DW
    Screen Resolution
    WQHD (3440 x 1440)
    Hard Drives
    Western Digital PC SN810 1TB SSD + Toshiba Kioxia KXG70PN84T094TB 4TB SSD
    PSU
    240W AC Power Adapter (supports 100-240V)
    Cooling
    Noctua NT-H1 + Fujipoly Extreme Thermal Pads
    Keyboard
    Alienware Low-Profile RGB Mechanical Gaming Keyboard AW510K
    Mouse
    Logitech MX Anywhere 3
    Internet Speed
    1 GBPS Down / 300 MBPS Up
    Browser
    Google Chrome
    Antivirus
    ESET NOD32 Antivirus
  • Operating System
    Windows 11 Pro for Workstations
    Computer type
    Laptop
    Manufacturer/Model
    Dell XPS 13 9310
    CPU
    i7-1185G7
    Motherboard
    Intel Tiger Lake-UP3 IMC Chipset
    Memory
    32 GB 4267MHz Quad LPDDR4 SDRAM
    Graphics card(s)
    Intel Iris Xe Graphics
    Sound Card
    Realtek Audio
    Monitor(s) Displays
    13.4" OLED 3.5K 400-Nit Screen + Alienware 38 Curved Gaming Monitor AW3821DW
    Screen Resolution
    WQHD (3440 x 1440)
    Hard Drives
    Samsung PM9A1 2TB SSD
    PSU
    230W AC Power Adapter (supports 100-240V)
    Cooling
    Noctua NT-H1 + Fujipoly Extreme Thermal Pads
    Mouse
    Logitech MX Anywhere 3
    Keyboard
    Alienware Low-Profile RGB Mechanical Gaming Keyboard AW510K
    Internet Speed
    1 GBPS Down / 300 MBPS Up
    Browser
    Google Chrome
    Antivirus
    ESET NOD32 Antivirus

Spartan

Active member
Member
VIP
Thread Starter
Local time
6:56 PM
Posts
80
Location
Dubai
OS
Windows 11 Pro for Workstations
The first thing I do now when I am on a new computer trying to tweak things is run the following command in an elevated command prompt, if the disk wasn't encrypted you'll get a message notifying of that. If it was encrypted, the decryption starts. But this is just wrong to start of with and I wish there was some tweak to do to the Windows installer so this doesn't happen regardless of the computer or hardware in it.

Code:
manage-bde c: -off
(replace c: with any other partition letters that may be present and run the command again)
 

My Computers

System One System Two

  • OS
    Windows 11 Pro for Workstations
    Computer type
    Laptop
    Manufacturer/Model
    Alienware m15 R7
    CPU
    AMD Ryzen 9 6900HX
    Memory
    64 GB 4800 MHz DDR5 RAM
    Graphics Card(s)
    GeForce RTX 3080 Ti 16 GB GDDR6
    Sound Card
    Realtek Audio
    Monitor(s) Displays
    15.6" QHD 240Hz 2ms 400-Nit Screen + Alienware 38 Curved Gaming Monitor AW3821DW
    Screen Resolution
    WQHD (3440 x 1440)
    Hard Drives
    Western Digital PC SN810 1TB SSD + Toshiba Kioxia KXG70PN84T094TB 4TB SSD
    PSU
    240W AC Power Adapter (supports 100-240V)
    Cooling
    Noctua NT-H1 + Fujipoly Extreme Thermal Pads
    Keyboard
    Alienware Low-Profile RGB Mechanical Gaming Keyboard AW510K
    Mouse
    Logitech MX Anywhere 3
    Internet Speed
    1 GBPS Down / 300 MBPS Up
    Browser
    Google Chrome
    Antivirus
    ESET NOD32 Antivirus
  • Operating System
    Windows 11 Pro for Workstations
    Computer type
    Laptop
    Manufacturer/Model
    Dell XPS 13 9310
    CPU
    i7-1185G7
    Motherboard
    Intel Tiger Lake-UP3 IMC Chipset
    Memory
    32 GB 4267MHz Quad LPDDR4 SDRAM
    Graphics card(s)
    Intel Iris Xe Graphics
    Sound Card
    Realtek Audio
    Monitor(s) Displays
    13.4" OLED 3.5K 400-Nit Screen + Alienware 38 Curved Gaming Monitor AW3821DW
    Screen Resolution
    WQHD (3440 x 1440)
    Hard Drives
    Samsung PM9A1 2TB SSD
    PSU
    230W AC Power Adapter (supports 100-240V)
    Cooling
    Noctua NT-H1 + Fujipoly Extreme Thermal Pads
    Mouse
    Logitech MX Anywhere 3
    Keyboard
    Alienware Low-Profile RGB Mechanical Gaming Keyboard AW510K
    Internet Speed
    1 GBPS Down / 300 MBPS Up
    Browser
    Google Chrome
    Antivirus
    ESET NOD32 Antivirus

hsehestedt

Well-known member
Power User
VIP
Local time
9:56 AM
Posts
705
Location
Texas, USA
OS
Windows 11 21H2
This is a serious issue and Microsoft has no right enabling Encryption by default without the user giving consent and knowing what he's getting into.
It's not Microsoft. Your hardware vendor decided they wanted device encryption turned on...

 

My Computers

System One System Two

  • OS
    Windows 11 21H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Home Built
    CPU
    Intel i7-11700K
    Motherboard
    ASUS Prime Z590-A
    Memory
    128GB Crucial Ballistix 3200MHz DRAM
    Graphics Card(s)
    No GPU - CPU graphics only (for now)
    Sound Card
    Realtek (on motherboard)
    Monitor(s) Displays
    HP Envy 32
    Screen Resolution
    2560 x 1440
    Hard Drives
    1 x 1TB NVMe Gen 4 x 4 SSD
    1 x 2TB NVMe Gen 3 x 4 SSD
    2 x 512GB 2.5" SSDs
    2 x 8TB HD
    PSU
    Corsair HX850i
    Case
    Corsair iCue 5000X RGB
    Cooling
    Noctua NH-D15 chromax.black cooler + 10 case fans
    Keyboard
    CODE backlit mechanical keyboard
    Mouse
    Logitech MX Master 3
    Internet Speed
    300Mb down / 20Mb up
    Browser
    Chromium Edge
    Antivirus
    Windows Defender
    Other Info
    Additional options installed:
    WiFi 6E PCIe adapter
    ASUS ThunderboltEX 4 PCIe adapter
  • Operating System
    Windows 11 21H2
    Computer type
    Laptop
    Manufacturer/Model
    HP Spectre x360 15-BL012DX
    CPU
    Intel i7-7500U
    Memory
    32GB
    Graphics card(s)
    Dual Intel HD 620 and Nvidia GeForce 940MX
    Sound Card
    Built-in Realtek HD Audio
    Monitor(s) Displays
    4k 15-inch
    Screen Resolution
    4k (3840 x 2160)
    Hard Drives
    1TB Seagate FireCuda 510 NVMe SSD
    Internet Speed
    300Mb down / 20Mb up
    Browser
    Chromium Edge
    Antivirus
    Windows Defender
    Other Info
    RAM Upgraded from 16GB to 32GB WiFi Upgraded from WiFi 5 to WiFi 6 SSD upgraded from 512GB NVMe SSD to 1TB Seagate FireCuda 510 NVMe SSD

TraderGary

Stock Market Wizard
Member
VIP
Local time
10:56 AM
Posts
334
Location
Atlanta, GA, USA
OS
Windows 11 Pro
I'm no longer encrypted. Let's see if I can tell the difference.
 

My Computer

System One

  • OS
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Dell XPS 15 9510 OLED
    CPU
    11th Gen i9 -11900H
    Memory
    32 GB 3200 MHz DDR4
    Graphics Card(s)
    NVIDIA® GeForce® RTX 3050Ti
    Monitor(s) Displays
    15.6" OLED Infinity Edge Touch
    Screen Resolution
    16:10 Aspect Ratio (3456 x 2160)
    Hard Drives
    1 Terabyte M.2 PCIe NVMe SSD
    2 Thunderbolt™ 4 (USB Type-C™)
    1 USB 3.2 Gen 2 (USB Type-C™)
    SD Card Reader (SD, SDHC, SDXC)
    Mouse
    Logitech MX Master 3
    Internet Speed
    700 Mbps, 24 Mbps
    Browser
    Microsoft Edge (Chromium)
    Antivirus
    Microsoft Windows Security (Defender)
    Other Info
    Microsoft 365 subscription
    Microsoft OneDrive 1TB Cloud
    Microsoft File History

    Interactive Brokers Trader Workstation
    Lightroom/Photoshop subscription
    DaVinci Resolve Studio
    Microsoft Visual Studio

Bree

Well-known member
Pro User
VIP
Local time
3:56 PM
Posts
2,737
Location
S/E England, UK
OS
Windows 11 Home
BitLocker does not self-enable on ANY of those systems. Ever. Period. I had to manually choose to BitLocker encrypt my drives every single time.
Yes, as I said, bitlocker was not turned on but Device encryption was - the drives were encrypted anyway, without any bitlocker key being provided. This appears to be the default when installing 10/11 Pro. Discussed at length in @NavyLCDR's thread here.


Both @ashleyg in post #80 (with screenshots) and myself in post #85 and post #95 reported exactly the same thing.
 

My Computers

System One System Two

  • OS
    Windows 11 Home
    Computer type
    Laptop
    Manufacturer/Model
    Acer Aspire 3 A315-23
    CPU
    AMD Athlon Silver 3050U
    Memory
    8GB
    Graphics Card(s)
    Radeon Graphics
    Monitor(s) Displays
    laptop screen
    Screen Resolution
    1366x768 native resolution, up to 2560x1440 with Radeon Virtual Super Resolution
    Hard Drives
    1TB HDD
    Browser
    Edge, Firefox
    Antivirus
    Defender
    Other Info
    fully 'Windows 11 ready' laptop. Windows 10 C: partition migrated from my old unsupported 'main machine' then upgraded to 11. A test migration ran Insider builds for 2 months. When 11 was released on 5th October it was re-imaged back to 10 and was offered the upgrade in Windows Update on 20th October.


    My SYSTEM THREE is a Dell Latitude 5410, i7-10610U, 32GB RAM, 512GB ssd, Windows 11 Pro.
  • Operating System
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Dell Lattitude E4310
    CPU
    i5 M 520
    Motherboard
    0T6M8G
    Memory
    4GB
    Screen Resolution
    1366x768
    Hard Drives
    500GB HDD
    Browser
    Firefox, Edge
    Antivirus
    Defender
    Other Info
    unsupported machine: Legacy bios, MBR, TPM 1.2, upgraded from W10 to W11 using W10/W11 hybrid install media workaround.


    My SYSTEM THREE is a Dell Latitude 5410, i7-10610U, 32GB RAM, 512GB ssd, Windows 11 Pro.

Devlin1888

"RockHardSemi"
Power User
VIP
Local time
3:56 PM
Posts
876
Location
Scotland
OS
Windows 11 Education Build 22483.1011 Developer Build
Ah mine has been turned off by default for me since changing to win 11 last june/july
 

My Computer

System One

  • OS
    Windows 11 Education Build 22483.1011 Developer Build
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom
    CPU
    i7 10700k@5.2
    Motherboard
    Gigabyte Gaming X Z490
    Memory
    16GB Viper Steel Series 3200mhz
    Graphics Card(s)
    Gigabyte RTX2070 Super X OC Windforce
    Monitor(s) Displays
    ASUS TUF Gaming 3840X2160 Benq Gl2250 1920x1080
    Screen Resolution
    4K/1600/1440/1080
    Hard Drives
    M.2 - ADATA SX8200 Pro 1TB
    SSD - Samsung 860 evo
    PSU
    Corsair 650w
    Case
    NZXT S340 Elite
    Cooling
    Cooler Master Hyper 212 RGB Black Edition
    Keyboard
    Razer Ornata Chroma
    Mouse
    Steel Series Rival 710
    Internet Speed
    50mbs
    Browser
    Opera GX
    Antivirus
    Windows Defender
    Other Info
    Logitech g29+Pedals+Shifter

fdisker

Member
Local time
7:56 AM
Posts
2
OS
Windows 11 Home
In my case I recently purchased a new Lenovo IdeaPad laptop that came with Win11. I've had the laptop for about a week and I've done quite a few Win11 clean installs because I like to tinker. Anyhow, to answer your question, if i DISABLE SECURE BOOT in the bios Win11 will not encrypt the drive after a clean install. If I ENABLE SECURE BOOT in the bios Win11 will encrypt the drive after a clean install every time.

I've ran CRYSTAL DISKMARK with encryption ENABLED and DISABLED and there is no performance hit. If you have a modern system I'd recommend letting Win11 encrypt the drive so that your data is protected.

My opinions are mine and mine alone. Take it for what it's worth.
 

My Computer

System One

  • OS
    Windows 11 Home
    Computer type
    Laptop
    Manufacturer/Model
    Lenovo
    CPU
    i5-1135G7
    Motherboard
    Lenovo
    Memory
    20GB
    Graphics Card(s)
    Iris Xe
    Sound Card
    onboard
    Monitor(s) Displays
    1
    Screen Resolution
    1080p
    Hard Drives
    Samsung 970 Evo Plus
    PSU
    onboard
    Case
    onboard
    Cooling
    onboard
    Keyboard
    onboard
    Mouse
    Microsoft bluetooth
    Internet Speed
    500/50
    Browser
    several
    Antivirus
    Windows Security by Microsoft
Top Bottom