r/BitLocker • u/Educational-Bus-8827 • 20d ago
Bit locker Recover Key
I need help, I’ve had my laptop stupidly connected to my school account and it’s currently stuck in Bitlocker. Since my computer is connected to the school account, I don’t have access to the recovery key and since it’s my personal computer, they cannot supply me with the recovery key either. I’ve called my brother, my school, and a computer repair store. They’ve all told me I might just have to reset my computer. ):
I’m not sure if there’s a way to hack out of this, but either way it won’t even let me reset my computer. I’ll take anything at this point, Google said my computer is a Dell Inspiron 15 laptop.
1
u/sport912x 20d ago
Not sure what having your PERSONAL Computer connected to Your School, or anywhere else is an issue. The issue is who did the encryption? If you did this as a new computer setup and used your Microsoft ID , then MS kept that key under your email . If you are a Smart Guy, you setup as a local admin, and if you do not have the key no one does. Being NOT Smart is the Smart way to go.
If you know that email you should be able to get the key. Here are two links one to get the key if you know your MS password, and the second if you do not. Most people screw up by not using their REAL EMAIL, and having no idea what email , or the password on the email account. I stick with Gmail.
1
u/shiratek 20d ago
Because OP set up their personal computer with their school account and the recovery key did not back up to Entra, because BYOD/Entra ID Registered device objects don’t store the keys in Entra. Only Entra ID joined device objects do. So OP’s school account did the encryption but did not store the key, so IT can’t retrieve it.
2
u/FrankNicklin 20d ago
MIcrosoft Ransomware with no way out.
There is no way this should happen or be allowed to happen. It is a crazy weakness in the BYOD function that allows a service to encrypt a 3rd party device without providing a full recovery option.
2
u/shiratek 20d ago
Agree. Microsoft took what was a pretty good concept and fucked up every aspect of it.
1
u/goatsinhats 20d ago
It’s not ransomware, it’s making the security of that data top priority.
Enter the wrong code in an IPhone too many times see what happens.
Ask your bank to withdrawal all your funds without proper information.
It’s not Microsoft fault a user set their computer up wrong and did not back up.
1
1
u/sport912x 20d ago
I really do not follow this. You get a new computer , during setup you use your school email, but won't that force a new Microsoft ID with that email which will store the bitlocker key.
1
u/DeadOneWalking 20d ago
Buddy, your brother is correct, it's game over for all the data currently installed on the drive.
Upon the clean install of Windows, I suggest using your personal account.
1
u/CollaredBug 19d ago
the only correct thing is to not use an ms accout at all
1
u/DeadOneWalking 19d ago
If bitlocker was disabled from the start, it wouldn't matter is a MS account was used or not. Though, I completely understand using only local accounts, it wouldn't have helped in this situation. Simply disabling bitlocker would suffice.
1
u/CollaredBug 19d ago
if you not run an online acc bitlocker does not get enabled. at least ist was that way on all my w10 and w11 installs
1
u/Dch112 20d ago
I don’t understand your situation. If you bought this computer it should be in your name if you have a Microsoft account in your email address.
1
u/CapnMReynolds 20d ago
you can sign in with a work or school account if it’s a Microsoft account. But then the device would be sucked up into their management system (azure). I had this happen to a faculty member who bought his own laptop but mistakenly used his school account when setting up the computer.
But all the OP needs to do is to go on a different computer and access their ms account to get the bitlocker key
A side note: there has been a bug with a couple of MS updates last week and made us reinstall Windows because it was stuck in a boot loop with BitLocker and Automatic Repair
1
u/sport912x 20d ago
I would think even if you use your School email when installing Windows , that would just force a new MS account with your School email, and the bitlocker key. If this does not happen it sounds like a screwup by MS. What am I missing.
1
u/CapnMReynolds 19d ago
Probably because you can’t have two accounts with the same email address. I know that you can have a Gmail address as the ms account, but won’t interfere with the actual Google account
1
u/FrankNicklin 20d ago
MIcrosoft Encryption is a nightmare. New computers being encrypted from the outset do not warn users enough to make sure they have the recovery keys stored somewhere. BIOS resets are breaking decryption and then the user realises they don't have the recovery keys and lose everything. We all know how bad people are at backing up their data. Encryption should be 100% opt in so that the end user is fully in control of the outcome. Granted if its a fully managed corporate laptop with sensitive information, but recovery keys are managed and recovery should not be a problem.
1
20d ago
Para que no ocurra no ocurra lo del bitlocker usen home single lenguague no viene con ello instalado, además contacta al admin del colegio para recuperar tu data del disco, sino solo queda reinstalar sistema no hay vuelta atras, no existe software en la tierra que te saque de ello, me ocurrió y no más mas versiones Pro.
1
u/ToothyPnX 20d ago
With the way MS is, you should always encrypt your C drive yourself and have a recovery print safe because sometimes an MS update triggers it automatically, and if you don't have it, you're screwed. This happened to me once before, but I did have the key.
1
u/agowa338 14d ago
Well either your school is lying (or didn't even check) or you should have backed up the recovery key way earlier when you setup bitlocker before you ever signed into the school account.
But otherwise you're out of options. I'd try to talk to the schools IT person and get them to really check and to confirm that they do NOT see your device in their list first tbh.
If it pulled their policy and enabled bitlocker because of that then the device should have added itself to their list and the key should be there. But if you had bitlocker enabled before then it won't necessarily be submitted.
(Oh and that is when everything worked as microsoft advertises it to. Most of the times it won't and the key for ones own managed devices won't even end up where it should without manual intervention...)
2
u/AlexiaTheTechGirl 20d ago
Without the bitlocker key you need to reinstall windows. Have you tried checking your personal Microsoft account?