Restor mit Bitlocker
Mustang, the following state of affairs:
1. On my son-in-law's laptop, the command works perfectly.
2. Also with a USB stick, generated with your current script (which is awesome by the way), there are error messages on my laptop. He seems to have a mistake, whatever that is.
From my point of view, there are several possibilities:
1. Wait until the next patch from Microsoft that fixes the bug is rolled out (a beta version can already be downloaded).
2. C: decrypt and then test again.
3. Create a system backup, reinstall Windows and restore backup.
4. Or throw away my laptop and live under a bridge :-)
What do you mean by that?
Willy, it is good that the MVP rescue media works Ok on your son-in-law's laptop, which to me seems to point to the issue being on your own laptop, but will wait to hear what Paul (Mustang) says too.
My preference here would be to decrypt your drive(s) then test again on the laptop without any encryption before considering any further actions.
Steve,
Version 10.0.17134 is significant. That means the system has undergone Windows upgrades and an obsolete Recovery partition at the beginning of the disk was left behind. Acronis has used winre.wim from the obsolete partition instead of from the proper Recovery partition at the end of the disk. This could be corrected by renaming winre.wim in the obsolete partition to Xwinre.wim or just deleting it. Then Acronis would find the proper winre.wim at the end of the disk.
wisch,
I'm not sure what you're saying about using the MVP Tool version 19.0. Did the script complete and create a USB disk? If so, what errors were shown on your laptop?
If I were you, I would decrypt the C: drive and test again. If all works okay including the manage-bde -status command, then I would re-encrypt the C: drive and test again.
Another option would be to create a Windows installation media using the Microsoft Media Creation Tool and run setup.exe from Windows. This will do a refresh of the entire Windows system. I would suggest decrypting the drive before doing the refresh and then re-encrypting it after the refresh is completed.
Mustang, yes, I created and tested the USB stick with the new version of your script, same error.
That's how I do it, as you suggested.
And if that's of no use, then I could create a system backup from the system control, reinstall Windows, and then just restore the system without the other two Windows partitions.
Is this thought okay?
wisch,
I think what we're seeing here is that problem lies with WinRE itself. When you built the WinRE from Windows Control panel, an old version of WinRE was used. When you build the WinRE using the MVP Tool version 19.0, the new version of WinRE was used.
Your suggestion of installing a fresh Windows system and then restoring just the C: drive and not the Recovery and EFI partitions would probably work.
Hello Mustang,
hello Steve,
ok, that's how I do it, but I'll wait for the next cumulative update from Windows to fix the bug.
I will then report back and inform you.
Have it well their two, until then.
And in between, thank you very much for your patience and perseverance.
You are real heroes!!
Best regards,
Willy
You're very welcome Willy. I enjoy helping a user that sticks with a problem and doesn't just quickly give up.
Mustang wrote:You're very welcome Willy. I enjoy helping a user that sticks with a problem and doesn't just quickly give up.
+1
Hey guys
I didn't wait for the next patch from Microsoft to be ready, but I decrypted Bitlocker, formatted my system disk, and reinstalled Windows. After that, only the partition C: backed back, so that the other two partitions are up-to-date. And then recreated a USB stick.
But unfortunately, the same problem, see, photos.
I'm best not to do anything until the next cumulative update is ready, and then try again.
Until then, I wish you all the best and stay healthy!
Best regards,
wischwei
Willy, the latest error: Error: There are no data volumes that can be protected with BitLocker Drive Encryption. is very different to the previous errors that were being reported when using manage-bde -status in the rescue media!
If you are using the MVP rescue media, please open the File Explorer and check that you are actually seeing your disk drives here?
Otherwise, in the command prompt window, type the commands:
diskpart
list disks
list volumes
To show what drives can be seen here?
Steve, Bitlocker is on C: unlocked and I want to activate it again.
Unfortunately this is not possible, the error message is "The system cannot find the file"
It occurred to me that the motherboard was replaced a few months ago. Maybe that's the cause of my problems.
In between, I deleted and re-set up TPM, but it didn't help.
At the Windows level, the manage-bde command displays "Protection is disabled."
wisch wrote:Steve, Bitlocker is on C: unlocked and I want to activate it again.
Unfortunately this is not possible, the error message is "The system cannot find the file"
Willy, what is the context for the above error message? Is this when using the BitLocker Control Panel from within Windows 10 to turn BitLocker on or off?
I am trying to understand if we are still dealing with the same or with different problems here, this feels like a different problem than being able to use the BitLocker commands in the rescue media.
Steve, see Snipp
Willy, this seems to be a known problem that you should be able to fix by doing:
manage-bde -off c:
Then delete the file C:\Windows\System32\Recovery\ReAgent.xml - the file will be recreated by the system after restarting Windows and then enabling BitLocker again for the drive.
Is it possible to disable the TPM in your BIOS? Then you could use this guide to enable BitLocker without a TPM.
https://www.windowscentral.com/how-use-bitlocker-encryption-windows-10
All good :-) Bitlocker works again.
I'll move on tomorrow. My family is calling for me.
Sleep well
Hello Paul (Mustang),
Hello Steve,
here some more information:
I have reinstalled Windows. Then I tried to restore a TI backup (system) previously backed up to an unlocked external hard drive with the USB stick.
This did not work because the backup file was allegedly corrupt. Even a restore of a previously created backup with Windows Tool did not work.
I then installed TI with version 2021 and with that I was able to restore.
Do we want to agree to let this thread rest until the next cumulative update is available?
I had that before, but I admit it it was itching in my fingers :-)
A good time for both of you and remains healthy,
wischwei
Willy, I am happy for this issue to be set aside if you want to do that. You may want to start a new topic if you need to bring any further issues to the forum at a later date. That would allow us all to make a clean start at that point rather than trying to read back through over 110 posts in this complicated saga.
I hope that you and your family all are able to stay safe and well in this uncertain world we now all share!