Question Win 11 & 23H2 bitlocker issues

[Hotrod2go]

Hi
Have an issue here with the OS giving contradictory messages about bitlocker being enabled or not.
The specific version of Win 11 I has OS build no.22631.4169 but when I open windows explorer & view my drives, none of them report bitlocker ON ( that is the symbol for bitlocker is not there) . When I go to enable it it gives me a dialog box to turn OFF bitlocker! Has anyone else had this problem with bitlocker?

This is not for the machine in my signature but another desktop.

 

[triplex1]

Privacy security > Device encryption

BitLocker overview

 

[Ralston18]

Use Powershell.

Specifically the "managebde -status cmdlet.

Results from my computer (three drives):

PS C:\WINDOWS\system32> manage-bde -status
BitLocker Drive Encryption: Configuration Tool version 10.0.22621
Copyright (C) 2013 Microsoft Corporation. All rights reserved.

Disk volumes that can be protected with
BitLocker Drive Encryption:
Volume D: [Dell Data]
[Data Volume]

Size: 465.63 GB
BitLocker Version: None
Conversion Status: Fully Decrypted
Percentage Encrypted: 0.0%
Encryption Method: None
Protection Status: Protection Off
Lock Status: Unlocked
Identification Field: None
Automatic Unlock: Disabled
Key Protectors: None Found

Volume C: [OS]
[OS Volume]

Size: 224.00 GB
BitLocker Version: None
Conversion Status: Fully Decrypted
Percentage Encrypted: 0.0%
Encryption Method: None
Protection Status: Protection Off
Lock Status: Unlocked
Identification Field: None
Key Protectors: None Found

Volume T: [Terabyte_SSD]
[Data Volume]

Size: 931.50 GB
BitLocker Version: None
Conversion Status: Fully Decrypted
Percentage Encrypted: 0.0%
Encryption Method: None
Protection Status: Protection Off
Lock Status: Unlocked
Identification Field: None
Automatic Unlock: Disabled
Key Protectors: None Found

PS C:\WINDOWS\system32>

Simply google "manage-bde -status" for for more information and to verify the cmdlet.

For example:

https://shellgeek.com/get-bitlocker-status-using-powershell/

Do note the space between "bde" and "-status".

 

[onespeedbiker]

One thing to check is TPM is enabled in the UEFI (BIOS). Also the icon may not appear if there are errors in the drive.

 

[Hotrod2go]

Use Powershell.

Specifically the "managebde -status cmdlet.

Results from my computer (three drives):

PS C:\WINDOWS\system32> manage-bde -status
BitLocker Drive Encryption: Configuration Tool version 10.0.22621
Copyright (C) 2013 Microsoft Corporation. All rights reserved.

Disk volumes that can be protected with
BitLocker Drive Encryption:
Volume D: [Dell Data]
[Data Volume]

Size: 465.63 GB
BitLocker Version: None
Conversion Status: Fully Decrypted
Percentage Encrypted: 0.0%
Encryption Method: None
Protection Status: Protection Off
Lock Status: Unlocked
Identification Field: None
Automatic Unlock: Disabled
Key Protectors: None Found

Volume C: [OS]
[OS Volume]

Size: 224.00 GB
BitLocker Version: None
Conversion Status: Fully Decrypted
Percentage Encrypted: 0.0%
Encryption Method: None
Protection Status: Protection Off
Lock Status: Unlocked
Identification Field: None
Key Protectors: None Found

Volume T: [Terabyte_SSD]
[Data Volume]

Size: 931.50 GB
BitLocker Version: None
Conversion Status: Fully Decrypted
Percentage Encrypted: 0.0%
Encryption Method: None
Protection Status: Protection Off
Lock Status: Unlocked
Identification Field: None
Automatic Unlock: Disabled
Key Protectors: None Found

PS C:\WINDOWS\system32>

Simply google "manage-bde -status" for for more information and to verify the cmdlet.

For example:

https://shellgeek.com/get-bitlocker-status-using-powershell/

Do note the space between "bde" and "-status".

Thanks, I'll apply that fix when I can access those machines.

One thing to check is TPM is enabled in the UEFI (BIOS). Also the icon may not appear if there are errors in the drive.

TPM is enabled as per default bios settings. Chkdsk from cmd prompt does not produce file errors when run as admin.

Another puzzling thing about all this is 2 other machines here have identical win 11 versions & they do not have bitlocker enabled despite Microsoft update from July enabling bitlocker by default from a patch update & this has been causing problems across the world. None of those machines are more than a year old btw. There is some funny stuff going on with Microsoft's endeavour to have every win 10 & 11 machine with bitlocker enabled without user input.

This is all fallout from the CrowdStrike fiasco some months back.