Windows 10: [SECURITY] File names and file thumbnails from locked BitLocker drive visible in Recent section

This issue was previously mentioned in this thread, however the provided response was not an answer to the question being asked.There is a clear security issue regarding BitLocker drives. After locking the drive via: manage-bde -lock -ForceDismount x:the file names and thumbnails are still visible in the Recent section of Home in Windows Explorer.The severity of this issue cannot be overlooked. If the issue is not treated seriously here, I will not hesitate to contact websites/journals from security industry.

:)

 

Recent File List

Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file1

Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file2
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file3
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file4
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file5
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file6
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file7
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file8
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file9
...

you get the idea. ( too lazy to put it in a for loop and test it.

or just open regedit and remove all the fileX from that key.

 

Able To Access BitLocker Files In Recent Files Without Credentials After Locking The BitLocker Drive.

Hi,

Thank you for writing to Microsoft Community Forums.

We reproduced this issue on our computer with the BitLocker enabled for one of the partitions and executed the
manage-bde -lock -ForceDismount x: command. Once we execute this command and try to access the files from recent files, BitLocker will give the
This drive is locked by bit locker drive encryption. You must unlock this drive from the Control Panel error and we will not be able to access these files.

Try the below methods and check if this helps.

Method 1:
Changing The Password Of BitLocker.

You may refer the section Changing your PIN or Password from
Using Your PIN or Password to change the password of the BitLocker.

Method 2:
Disable And Re-Enable BitLocker.

I suggest you to Disable-BitLocker >
Restart the computer once > Enable-BitLocker >
Restart the computer once again and check for the issue.

Method 3:
Updating The TPM.

If the above methods are not working and if you have TMP, I suggest you to
Update your security processor (TPM) firmware and check if this helps.

Note: Modifying TPM settings incorrectly can cause serious problems to your computer. Modifications of the settings are at your own risk.

Give it a shot and let us know of any changes.

Hope it helps.

 

File back up to bitlockered external drive

Thanks John.

By trial and error the solution is,

• Set the file back up to the desired external USB drive, Back up using file history.
• Run backup to completion.
• Dismount, (Remove) the drive used.
• Remount (Plug in) the drive used for the file back up (Steps 1&2) and encrypt using Bitlocker.

Note you can only encrypt drives using some versions of Windows (Pro for eg not Home)

• Once the external drive has been encrypted dismount.
• Remount the drive, go to the file back up option, Open, Settings, Backup,
  Back up using file history.
• The drive should now still be visible and has been encrypted.
• Accessing the drive will be dependant on how it was set up in Bitlocker,
  Open with this PC, password, pin code etc.
• Repeat file back up as in the first two steps.

Hope this helps someone else.