Bitlocker

Dirk Diggler · 2 Nov 2019 at 15:10

I've installed some office apps onto my Surface Pro 6 using my company credentials. It transpires that my C: is now locked down with Bitlocker encryption and I'm restricted with certain things e.g. booting into Safe Mode and similar things. This isn't bothering me right now, but say I leave the company and have no IT support from them, how could I take back control of my device? Would I be able to install Windows fresh via USB?

Or, should I get Bitlocker keys now from IT and remove the Office software, encryption etc.?

Donnie Fisher · 2 Nov 2019 at 23:05

So the company has restricted your use of your personal device? Not just have the company provide a device for you ?

There is not harm in asking the it dept for the key, you can only but ask.

As for reinstall, yes, the general approach appears to delete the partitions through windows repair tools or Unix bootups.

silvagti · 2 Nov 2019 at 23:51

Seems odd that installing office apps would apply bitlocker encryption to your system drive and restrict settings.

Did they join it to the company domain?

Donnie Fisher · 3 Nov 2019 at 05:55

Some interesting reading here about bitlocker...Especially the reply from the Dell guy talking about when bitlocker kicks in.

https://www.dell.com/community/Wind...-but-I-never-installed-it/td-p/6019486/page/2

Dirk Diggler · 3 Nov 2019 at 07:24

silvagti said:
Seems odd that installing office apps would apply bitlocker encryption to your system drive and restrict settings.

Did they join it to the company domain?

It's not in the company domain, and I can't remember it ever installing.

If a Windows reinstall solves this then I'm happy with that as I will wipe it when I stop using it for work related stuff anyway.

UnworthyBean · 3 Nov 2019 at 09:51

Is Bitlocker not enabled by default on the Surfaces? Been a little while since I got rid of mine but I'm sure it was enabled by default and just used the account password.

Is it Office 365 that's been installed? Installed using a Microsoft account has maybe used the password from that.

Dirk Diggler · 3 Nov 2019 at 09:56

UnworthyBean said:
Is Bitlocker not enabled by default on the Surfaces? Been a little while since I got rid of mine but I'm sure it was enabled by default and just used the account password.

Is it Office 365 that's been installed? Installed using a Microsoft account has maybe used the password from that.

I've managed to log in to my work Microsoft account and now have the keys. It's been annoying to see hardware that I own restricted like this, bit I do use it for work and the company are really paranoid about cyber security so it's to be expected really.

As long as I can "reclaim" the device when I want to, then I'm fine with it.

As for being enabled by default, I think it must be because it's the only device I have seen this happen to.

Donnie Fisher · 3 Nov 2019 at 16:04

Well at least you have the key and able to get you machine back so to speak

Django x2 · 15 Nov 2019 at 14:08

Your device has been enrolled into InTune I suspect, and there will be a device policy on there that dictates BitLocker so the company is protecting it's data.

Make sure you keep backups of important data because if the device did die, the drive would be locked and a re-image is the only way you're getting stuff off.

kinminyo · 15 Nov 2019 at 15:22

BitLocker is secure but restrict the device a lot. You have to disable it when doing things like reinstall, booting in safe mode, etc.