Windows 10: Bitlocker turn on automatically

Hi All,


I'm working on Drive Encryption project and the SCCM.


At first we have specific AD group OU to contain test machine and link the specific GPO about drive encryption into it (See below screenshot)


The BitLocker had never turn on itself before.


It was just today ago that we move the GPO to upper level group OU and it start encrypted some machine without any notice.


It's my target to have it turned on without end user activity but actually through SCCM deployment. Now I've a question why it never turned on itself before.


All of the effected machine has below condition :


TPM 2.0 is there and enabled.

UEFI and SecureBoot is enabled.







:)

 

Need to turn off Bitlocker to install Windows 10

Hi,

We suggest doing the following steps again to resolve the issue. To complete the procedure, make sure that you have the following information:

• You must be able to provide administrative credentials.
• The drive must be BitLocker-protected.

To suspend BitLocker Drive Encryption on an operating system drive, please follow the steps below:

• Click Start, click Control Panel, click
  System and Security, and then click BitLocker Drive Encryption.
• Click Suspend Protection for the operating system drive.
• A message is displayed, informing you that your data will not be protected while BitLocker is suspended and asking if you want to suspend BitLocker Drive Encryption.
  
• Click Yes to continue and suspend BitLocker on the drive.

Let us know how it goes.

 

HELP: Automatic BitLocker Unlock.

Please help,
Looking for a way( script or maybe some unknown windows command or registry hack) to automatically unlock a non OS BitLocker encrypted drive on Log-In.

My situation: Right now my OS SSD Samsung 840 Evo has a boot password, its not Bios option nor windows eDrive but the third one, the one you need 3rd party software to activate it, had to purchase EMBASSY Security Center to do it.
No issues here, the OS drive is locked and encrypted.

One of My HDD Drives is encrypted with Bitlocker, so every time my PC is booted, I need to enter windows log-in password and then open my computer and enter another password to unlock the drive.
Whats worse is that unlike the SSD that needs unlock password only after full shutdown the Bitlocker needs it every log-in.

Windows has an option to Automaticlly unlock all BitLocker drives on boot, BUT the issue here is that this official option only works if your OS drive is also BitLocker encrypted and then log-in password unlocks everything.

Im looking for maybe a windows Script or some Hidden command to automatically unlock the BitLocker drive.

Even if it Sounds insecure like having the actual password somewhere in the registry, text file or script I dont care because the OS drive is encrypted and passworded.
Also I have a TPM chip I can encrypt any file/folder so even if file is copied from my PC when its fully unlocked the files wont be readable anywhere unless unencrypted before.

If its important im on 8.1 pro 64bit

P.S. If there is no solution for my problem then my only choice is when windows 10 comes out to do a clean install on another Samsung 840 Evo that was previously cleared and eDrive option enabled


Thanks in advance.

 

HELP: Automatic BitLocker Unlock.

Thank you sir, ill try your solution.

Windows Auto unlock ONLY works in case you have Bitlocker on your system drive, because if your system drive is not encrypted auto unlocking other drives means loss of security.
But in my case my system drive is Encrypted with hardware encryption that i password unlock during boot. So auto unlocking Bitlocker drives will do fine for me.