💡 Feature: Disable BitLocker auto-encrypting C: drive

[nickelberg]

Feature Description

In the newest Windows 11 builds, the OS drive is automatically encrypted even if a local user account is used.
Running this command resolves the problem:
reg add HKLM\SYSTEM\CurrentControlSet\Control\BitLocker /v PreventDeviceEncryption /d 1 /t REG_DWORD /f
However, in my case, the drive was already encrypted when I ran the command above.
Running manage-bde -status showed me:

Size:                 126,25 GB
BitLocker Version:    2.0
Conversion Status:    Used Space Only Encrypted
Percentage Encrypted: 100,0%
Encryption Method:    XTS-AES 128
Protection Status:    Protection Off
Lock Status:          Unlocked
Identification Field: Unknown
Key Protectors:       None Found`

Running manage-bde -off C: fixed the problem, and after about three minutes the C: drive was fully decrypted :)

TL;DR - My feature request:

• Offer a tweak which can disable auto OS encryption
• Offer automatic decryption if the script detects that the C: drive was previously encrypted automatically

Screenshots

No response

[Aetherinox]

Sure thing, I can add this.

I have a love/hate relationship with BLE. I like that it's a feature, and I personally use BLE, but auto enabling it for users is a dumb idea on Microsoft's part, especially when users have no clue what it does, and aren't aware of the recovery key functionality.

[nickelberg]

It makes sense on physical machines, but I prefer my VMs unencrypted.

Otherwise very useful utility, starred and definitely going to use it from now on.