@garlin , I suspect that you know the answer to this...
Unfortunately, I have only a single system that will auto encrypt, but I simply cannot reinstall on it now so I have no way to test this. There are a number of posts regarding a registry entry that is used to prevent automatic device encryption. Unfortunately, this information does not tell me if I need to integrate this registry entry into the boot.wim or if I can run it early in the installation process.
Just for clarification, the registry entries that are used to bypass Windows 11 system requirements can be loaded very early on. For example, at the very first static screen during setup, the appropriate registry changes can be loaded. What I need to know is if I can do the same for the entry to prevent encryption. My intention is to add it to my answer files but before I modify a whole bunch of these files, I simply need to know if this will work and that is difficult without a machine to test on.
Here is the registry file that makes the appropriate change assuming that it works this early in the setup process:
Why does this matter?
Yes, I know that I could simply allow encryption to happen and then decrypt after installation, but my situation is a little different. I'll save the long explanation, just trust that there is a good reason for what I am doing
Unfortunately, I have only a single system that will auto encrypt, but I simply cannot reinstall on it now so I have no way to test this. There are a number of posts regarding a registry entry that is used to prevent automatic device encryption. Unfortunately, this information does not tell me if I need to integrate this registry entry into the boot.wim or if I can run it early in the installation process.
Just for clarification, the registry entries that are used to bypass Windows 11 system requirements can be loaded very early on. For example, at the very first static screen during setup, the appropriate registry changes can be loaded. What I need to know is if I can do the same for the entry to prevent encryption. My intention is to add it to my answer files but before I modify a whole bunch of these files, I simply need to know if this will work and that is difficult without a machine to test on.
Here is the registry file that makes the appropriate change assuming that it works this early in the setup process:
Code:
Windows Registry Editor Version 5.00
; This file will (hopefully) prevent auto device encryption when installing Windows from scratch.
; To use: Copy this file to the root of your Windows installation media making sure to name it so
; that it has a .reg extension. Boot from it to begin the Windows installation process. At the
; first static screen, open a command prompt by pressing SHIFT + F10 and run the .reg file. Proceed
; with installation as normal. After installation, open an elevated command prompt and run the
; command "manage-bde - status c:". Is the drive completely decrypted?
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\BitLocker]
"PreventDeviceEncryption"=dword:00000001Why does this matter?
Yes, I know that I could simply allow encryption to happen and then decrypt after installation, but my situation is a little different. I'll save the long explanation, just trust that there is a good reason for what I am doing
My Computers
-
At a glance
Win11 Pro 25H2 (RTM+)Intel i7-14650HX32 GBNo GPU - Built-in Intel Graphics- OS
- Win11 Pro 25H2 (RTM+)
- Computer type
- PC/Desktop
- Manufacturer/Model
- Acemagic
- CPU
- Intel i7-14650HX
- Memory
- 32 GB
- Graphics Card(s)
- No GPU - Built-in Intel Graphics
- Sound Card
- Integrated
- Monitor(s) Displays
- Varies as machine will often be moved to locations with different monitors
- Screen Resolution
- Varies
- Hard Drives
- 1 x 1TB Gen 4 NVMe SSD
- PSU
- 120W Power Brick
- Keyboard
- Corsair K70 Max RGB Magnetic Keyboard
- Mouse
- Logitech MX Master 3
- Internet Speed
- 1Gb Up / 1 Gb Down
- Browser
- Edge
- Antivirus
- Windows Defender
-
At a glance
Win11 Pro 25H2 (RTM+)Intel i7-1255U16 GBIntel Iris Xe Graphics- Operating System
- Win11 Pro 25H2 (RTM+)
- Computer type
- Laptop
- Manufacturer/Model
- Lenovo ThinkBook 13x Gen 2
- CPU
- Intel i7-1255U
- Memory
- 16 GB
- Graphics card(s)
- Intel Iris Xe Graphics
- Sound Card
- Realtek® ALC3306-CG codec
- Monitor(s) Displays
- 13.3-inch IPS Display
- Screen Resolution
- WQXGA (2560 x 1600)
- Hard Drives
- 2 TB 4 x 4 NVMe SSD
- PSU
- USB-C / Thunderbolt 4 Power / Charging
- Keyboard
- Backlit, spill resistant keyboard
- Mouse
- Buttonless Glass Precision Touchpad
- Internet Speed
- 1Gb Up / 1Gb Down
- Browser
- Edge
- Antivirus
- Windows Defender
- Other Info
- WiFi 6e / Bluetooth 5.1 / Facial Recognition / Fingerprint Sensor / ToF (Time of Flight) Human Presence Sensor
