A clean install of Windows 10 or 11 can automatically enable disk encryption with Bitlocker. The main system partition and all fixed drives will be encrypted.
Bitlocker protects data on the computer from unauthorized access by encrypting partitions and drives.
Microsoft says of BitLocker: “Device encryption is a Windows feature that provides a simple way for some devices to automatically enable BitLocker encryption.”
The problem is that the encryption process happens automatically in this case, and many users may not know about it. This can lead to problems, for example when reinstalling the operating system without saving the Bitlocker recovery key or using a Microsoft account.
Access to your files will be lost in the worst case scenario.
Below we'll look at ways to disable automatic drive encryption.
Option 1: during installation
On the country or region selection screen.
Open the Registry Editor.
With the shortcut Shift-F10 open a command line window and type regedit – Enter.
This will open the Registry Editor.
Turn off BitLocker automatic encryption
Follow the path HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\BitLocker
Right-click BitLocker and select New > Dword (32-bit) Value.
Name it PreventDeviceEncryption.
Double click on it and change its value to 1.
Close Registry Editor and the Command Prompt window.
Proceed with the installation as normal.
Option 2: Tease the ISO image
Below we will see how you can modify an ISO image. You will need a USB with at least 16GB of storage space.
Download it Rufus and start the application
Rufus does not need to be installed. Just double-click the downloaded file to launch the application.
Download the ISO using Rufus (You can download it directly from Microsoft or choose an ISO you already downloaded). To download the ISO automatically select Download
Choose your Windows edition, version, language and architecture, or choose an ISO that already exists on your device
Disable automatic Bitlocker device encryption
Select Device at the top to select a device to copy the Windows installation files to. You cannot select fixed hard drives.
Once done, activate the start button at the bottom. Rufus displays the Windows User Experience window.
Make sure Disable BitLocker is selected. This will prevent drives from being automatically encrypted with BitLocker during Windows installation.
Select OK to continue. The program will transfer the files you need to the selected USB device.
Bonus Tip: check BitLocker status
With a simple command you can see the status of all drives and partitions with respect to BitLocker encryption:
Search for CMD, and select “Run as administrator”.
Run the command manage-bde status and press the Enter key.
George is still wondering what he is doing here….
