Windows 11 24H2 Enables BitLocker by Default How to Disable using ntlite

J

jlsupremo

Member
Messages
38
Reaction score
3
Windows 11 24H2 Enables BitLocker by Default How to Disable using ntlite, remembering that I only need to uncheck that it encrypts during installation, I do not want to remove or uninstall, just do not allow the disk to be encrypted during installation.

Thank you very much.
 
Never tested, I remove it, but maybe this key, integrated in NTLite (Registry - Add) from a reg file can work

Code: 
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\BitLocker]
"PreventDeviceEncryption"=dword:00000001
 
There is the option in it already, after loading an image go to Settings:
"Automatic device encryption (BitLocker)", disable that.
 
nuhi said:
There is the option in it already, after loading an image go to Settings:
"Automatic device encryption (BitLocker)", disable that.
Click to expand...
Thank you very much, that was the option I hadn't found, I found it, thank you very much.
<Tweak name="BitLocker\PreventDeviceEncryption">1</Tweak>
 
Struggline with this and 24H2, I get installation failed during windows setup, I'm trying to do it this way so I can make use of my SED Samsung 990
 
GoNz0 said:
Struggline with this and 24H2, I get installation failed during windows setup, I'm trying to do it this way so I can make use of my SED Samsung 990
Click to expand...
The problem is probably elsewhere, I delete BL and I have no problems with the installation
Also tested by disabling this option
 
I'll delete it on the next test, thanks.
*edit, how do I delete it?
 
Last edited:
GoNz0 said:
Struggline with this and 24H2, I get installation failed during windows setup, I'm trying to do it this way so I can make use of my SED Samsung 990
Click to expand...
How is this related to Bitlocker?
If it's not, please open a new topic and attach the preset demonstrating the isuse.
Thanks.
 
nuhi said:
How is this related to Bitlocker?
If it's not, please open a new topic and attach the preset demonstrating the isuse.
Thanks.
Click to expand...
To point out the obvious, it's the new implementation of 24h2 forcing bit locker regardless now. Add the registry key in ntlite now results in a failed installation of windows. But as has already been explained in this topic by a helpful member, disabling bit locker in services prevents the software bit locker kicking in and I've finally got it sorted as it gave me time to edit group policy to hardware encryption only.
 
GoNz0 said:
To point out the obvious, it's the new implementation of 24h2 forcing bit locker regardless now. Add the registry key in ntlite now results in a failed installation of windows. But as has already been explained in this topic by a helpful member, disabling bit locker in services prevents the software bit locker kicking in and I've finally got it sorted as it gave me time to edit group policy to hardware encryption only.
Click to expand...
The reason why Bitlocker option exists is exactly because of that 24H2 default behavior.

Tested it now, that option disabled while keeping Bitlocker and its service does not cause any errors that I could see.
This option is Microsoft documented, it's not something custom.
So you must have had something else, you're welcome to attach the preset which demonstrates the issue and let me know what to look for.

Note that removing WinRE.wim or Manual Setup components would cause errors during setup, that is why they are protected by the Windows Setup compatibility, which is recommended to stay enabled.

Thanks.
 
nuhi said:
The reason why Bitlocker option exists is exactly because of that 24H2 default behavior.

Tested it now, that option disabled while keeping Bitlocker and its service does not cause any errors that I could see.
This option is Microsoft documented, it's not something custom.
So you must have had something else, you're welcome to attach the preset which demonstrates the issue and let me know what to look for.

Note that removing WinRE.wim or Manual Setup components would cause errors during setup, that is why they are protected by the Windows Setup compatibility, which is recommended to stay enabled.

Thanks.
Click to expand...
By adding this key in the latest build results in and install failed during setup

Code: 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\BitLocker]
"PreventDeviceEncryption"=dword:00000001

Setting the BitLocker service to disabled on the other hand means you can install windows without issue and then make the changes to bitlocker in group policy before enabling BitLocker, and I am now running with hardware encryption finally.
 
You must log in or register to reply here.
Back
Top