Friday, July 13, 2012 6:43 AMHi,
We have now rolled out approx 200 (HP) PC's with Win7x64 and Bitlocker. Unfortunately we see a few cases where the PC's boot in Bitlocker screens.
Today we found _one_ reason we can replicate:
Change the display language at startup (Preferred Locale) via
Control panel / Region and Language / Administrative / Copy Settings (tick the "welcome screen and system accounts" option) and click "OK"
This will change \windows\system32\winload.exe (BCD PreferredLokale - 0x12000005) but appearently not report back to Bitlocker (or whatever) causing a Bitlocker screen at next reboot.
Is what we see a bug? Are we doing something wrong with our golden image?
Thanks for your ideas!
Monday, July 16, 2012 8:27 AMModerator
Monday, July 16, 2012 1:44 PM
That's not a fair reply.
Bitlocker is a centrally managed application with automatic AD-integration whereas the locale-settings are defined per-PC and each user can change this. Region and Language settings are a standard feature from Windows that when changed willingly should not trigger a bit-locker block. Neither can we inform users of this requirement.
Tuesday, July 17, 2012 4:47 AMModerator
Tuesday, July 17, 2012 6:54 AMWhy do I even bother writing here? These answers are so worthless.
Tuesday, July 17, 2012 7:43 AMModerator
Tuesday, July 17, 2012 8:18 AMModerator
After research, I found the following information.
If the user wants to apply language settings to All users and system accounts. If this option is selected, it will change the local computer BCD settings (if the user-only option is selected, BCD settings are not changed). This change will result in a modification of a BCD setting to the new locale value. If you are using a TPM with BitLocker, this is interpreted as a boot attack on reboot and the computer will require that the user enter the recovery password or recovery key to start the computer.
TechNet Community Support
- Marked As Answer by Juke ChouMicrosoft Contingent Staff, Moderator Sunday, August 05, 2012 11:32 AM
Monday, December 10, 2012 5:40 PMTrue Fact! I totally Agree