Windows automatic updates after crowdstrike

Koroth · Jul 23, 2024

Hi, since crowdstrike happend i have issues with windowses auto updating even though i did all my best to disable it. I have a script running every login that re-adds noautoupdate dword entry in registry but even now that isn't enough (MS deleted it few times already so it has to apply every boot)
Anyone has this issue?
Does MS just want sysadmins to destroy windows update service to disable windows updates?

antspants · Jul 23, 2024

Koroth said:
Does MS just want sysadmins to destroy windows update service to disable windows updates?

Why would Microsoft want to do that?

Koroth said:
since crowdstrike happend i have issues with windowses auto updating

I don't get the relationship?

antspants · Jul 23, 2024

Try a Google search for the term? Including quotes:

Issues with "auto-updating" since "crowdstrike event"

davidhelp · Jul 23, 2024

So there is a way to get around Bitlocker encryption!
Coming Windows 11 24H2 will force Bitlocker on all users. You can stop this but most do not know the steps or even know their files are encrypted. Many people will lose all their files because they cannot remember the Bitlocker log in. Microsoft will not help even though obviously they can get around the encryption.

FTA below: If a disk is protected by BitLocker encryption, the tool will prompt for the BitLocker recovery key and then continue to fix the CrowdStrike update.

The recovery tool has also been updated to include a new PXE boot option, and even a boot to Safe Mode option that allows IT admins to access BitLocker-enabled devices without a recovery key.

Microsoft releases recovery tool to help repair Windows machines hit by CrowdStrike issue
Microsoft releases recovery tool to help repair Windows machines hit by CrowdStrike issue - The Verge

XxXxX · Jul 23, 2024

davidhelp said:
So there is a way to get around Bitlocker encryption!
Coming Windows 11 24H2 will force Bitlocker on all users. You can stop this but most do not know the steps or even know their files are encrypted. Many people will lose all their files because they cannot remember the Bitlocker log in. Microsoft will not help even though obviously they can get around the encryption.

FTA below: If a disk is protected by BitLocker encryption, the tool will prompt for the BitLocker recovery key and then continue to fix the CrowdStrike update.

The recovery tool has also been updated to include a new PXE boot option, and even a boot to Safe Mode option that allows IT admins to access BitLocker-enabled devices without a recovery key.

Microsoft releases recovery tool to help repair Windows machines hit by CrowdStrike issue
Microsoft releases recovery tool to help repair Windows machines hit by CrowdStrike issue - The Verge

so they have a way, backdoor, to bypass bitlocker encryption. that wont take the bad actors long to get hold of.
this CrowdStrike malarky is most certainly having a knock on effect for Microsoft and Windows, thankfully i use VeraCrypt, no backdoors.

best of luck. Steve ..

Silvio · Jul 23, 2024

XxXxX said:
so they have a way, backdoor, to bypass bitlocker encryption. that wont take the bad actors long to get hold of.

Took me approx 4.5 seconds, (including time taken to google Win 11 24h2 bitlocker), to figure out, installing Win 11 24H2, with Bitlocker disabled.

Wouldn't be walking around with a Windows 11 laptop anyway, even though I have a few.

Would be walking around with a Linux laptop, which definitely has full drive encryption.

antspants · Jul 23, 2024

davidhelp said:
So there is a way to get around Bitlocker encryption!
Coming Windows 11 24H2 will force Bitlocker on all users. You can stop this but most do not know the steps or even know their files are encrypted. Many people will lose all their files because they cannot remember the Bitlocker log in. Microsoft will not help even though obviously they can get around the encryption.

FTA below: If a disk is protected by BitLocker encryption, the tool will prompt for the BitLocker recovery key and then continue to fix the CrowdStrike update.

The recovery tool has also been updated to include a new PXE boot option, and even a boot to Safe Mode option that allows IT admins to access BitLocker-enabled devices without a recovery key.

Microsoft releases recovery tool to help repair Windows machines hit by CrowdStrike issue
Microsoft releases recovery tool to help repair Windows machines hit by CrowdStrike issue - The Verge

Where does Bitlocker come into the OP's problem?

kelper · Jul 23, 2024

A forgotten Bitlocker key can be recovered through a MS account.

XxXxX · Jul 23, 2024

Silvio said:
Took me approx 4.5 seconds, (including time taken to google Win 11 24h2 bitlocker), to figure out, installing Win 11 24H2, with Bitlocker disabled.

Wouldn't be walking around with a Windows 11 laptop anyway, even though I have a few.

Would be walking around with a Linux laptop, which definitely has full drive encryption.

my old'ish Dell latitude has Ubuntu 22.04 installed with full disk encryption.

best of luck. Steve ..

davidhelp · Jul 23, 2024

You now have to remember the bitlocker login and the Windows login and hope you remember the microsoft account.
Plus hope bitlocker works all the time. When I did support and the person could not log in then the pc and or the usb device was wiped. They then used OneDrive to download all the lost files back to the pc. OneDrive does not upload all your files.

kelper · Jul 23, 2024

I'm sure nobody here can remember his/her* Bitlocker key! Perhaps keys should be kept on a USB thumb drive with a fingerprint sensor or 2FA?

It's 48 digits and you would need perfect recall. Actors can memorise very long speeches but are helped by context - a steam of hex has no context.

*I can't bring myself to write the singular 'their' here although I do use it in informal speech.

pseymour · Jul 23, 2024

kelper said:
Perhaps keys should be kept on a USB thumb drive with a fingerprint sensor or 2FA?

For the few systems I have encrypted, I store the keys in my password manager, which requires 2FA.

Koroth · Jul 23, 2024

davidhelp said:
So there is a way to get around Bitlocker encryption!
Coming Windows 11 24H2 will force Bitlocker on all users. You can stop this but most do not know the steps or even know their files are encrypted. Many people will lose all their files because they cannot remember the Bitlocker log in. Microsoft will not help even though obviously they can get around the encryption.

FTA below: If a disk is protected by BitLocker encryption, the tool will prompt for the BitLocker recovery key and then continue to fix the CrowdStrike update.

The recovery tool has also been updated to include a new PXE boot option, and even a boot to Safe Mode option that allows IT admins to access BitLocker-enabled devices without a recovery key.

Microsoft releases recovery tool to help repair Windows machines hit by CrowdStrike issue
Microsoft releases recovery tool to help repair Windows machines hit by CrowdStrike issue - The Verge

Are you a bot sir?

Koroth · Jul 23, 2024

antspants said:
Try a Google search for the term? Including quotes:

Issues with "auto-updating" since "crowdstrike event"

Obviously i tried that, no one said anything so far and literally i got forced update the day it happend

antspants · Jul 23, 2024

Koroth said:
Obviously i tried that, no one said anything so far and literally i got forced update the day it happend

That was kind of my point. I can’t find anyone else mentioning it so it would seem obvious, at least to me, that it has nothing to do with the recent incident.
I’d be genuinely interested in seeing another instance if you find one.
Cheers

antspants · Jul 23, 2024

Koroth said:
Are you a bot sir?

That was my first thought. Totally derailed your problem.

Koroth · Jul 25, 2024

my script:

Code:

@echo off
REG ADD HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU /v NoAutoUpdate /t REG_DWORD /d 1

im running it as SYSTEM every reboot. (scheduler)

Winsanity · Jul 25, 2024

Koroth said:
Hi, since crowdstrike happend i have issues with windowses auto updating even though i did all my best to disable it. I have a script running every login that re-adds noautoupdate dword entry in registry but even now that isn't enough (MS deleted it few times already so it has to apply every boot)
Anyone has this issue?
Does MS just want sysadmins to destroy windows update service to disable windows updates?

We haven't seen any signs of this in our environment yet, do you have Crowdstrike installed on all of your machines or just some of them? Also, do you happen to remember which steps you followed to get that particular device out of Recovery Mode after the issue?

mecanicogolf · Jul 25, 2024

Silvio said:
Took me approx 4.5 seconds, (including time taken to google Win 11 24h2 bitlocker), to figure out, installing Win 11 24H2, with Bitlocker disabled.

Wouldn't be walking around with a Windows 11 laptop anyway, even though I have a few.

Would be walking around with a Linux laptop, which definitely has full drive encryption.

I did it with Rufus.

andrew129260 · Jul 25, 2024

pseymour said:
For the few systems I have encrypted, I store the keys in my password manager, which requires 2FA.

I have it stored in my microsoft account which is protected by hardware 2fa encryption.

I like physical security keys.

Windows automatic updates after crowdstrike

Member

My Computer

Like a rolling drone.

My Computers

Like a rolling drone.

My Computers

Member

My Computer

Well-known member

My Computers

Well-known member

My Computers

Like a rolling drone.

My Computers

Well-known member

My Computers

Well-known member

My Computers

Member

My Computer

Well-known member

My Computers

doing another Win11 migration 🙄

My Computers

Member

My Computer

Member

My Computer

Like a rolling drone.

My Computers

Like a rolling drone.

My Computers

Member

My Computer

Active member

My Computer

Well-known member

My Computer

Well-known member

My Computers

Similar threads