Win7 causes Bitlocker to lock up when changing locale
Hi, We have now rolled out approx 200 (HP) PC's with Win7x64 and Bitlocker. Unfortunately we see a few cases where the PC's boot in Bitlocker screens. Today we found _one_ reason we can replicate: Change the display language at startup (Preferred Locale) via Control panel / Region and Language / Administrative / Copy Settings (tick the "welcome screen and system accounts" option) and click "OK" This will change \windows\system32\winload.exe (BCD PreferredLokale - 0x12000005) but appearently not report back to Bitlocker (or whatever) causing a Bitlocker screen at next reboot. Is what we see a bug? Are we doing something wrong with our golden image? Thanks for your ideas!
July 13th, 2012 2:43am

Hi, I donot think it is a bug. If one of the early boot files is modified, Bitlocker will enter Bitlocker Recovery Mode. Please suspend Bitlocker before making this change.Juke Chou TechNet Community Support
Free Windows Admin Tool Kit Click here and download it now
July 16th, 2012 4:27am

Hi Juke, That's not a fair reply. Bitlocker is a centrally managed application with automatic AD-integration whereas the locale-settings are defined per-PC and each user can change this. Region and Language settings are a standard feature from Windows that when changed willingly should not trigger a bit-locker block. Neither can we inform users of this requirement.
July 16th, 2012 9:44am

Hi, You need to use Process Monitor to indentify whether the early boot files will be changed when modifying locale. If it is indeed changed, this is by design that Bitlocker will enter Recovery Mode after that change. Juke Chou TechNet Community Support
Free Windows Admin Tool Kit Click here and download it now
July 17th, 2012 12:47am

Why do I even bother writing here? These answers are so worthless.
July 17th, 2012 2:54am

Hi, Sorry for that, I will help you test that. If get any info, will post back. Juke Chou TechNet Community Support
Free Windows Admin Tool Kit Click here and download it now
July 17th, 2012 3:43am

Hi, After research, I found the following information. If the user wants to apply language settings to All users and system accounts. If this option is selected, it will change the local computer BCD settings (if the user-only option is selected, BCD settings are not changed). This change will result in a modification of a BCD setting to the new locale value. If you are using a TPM with BitLocker, this is interpreted as a boot attack on reboot and the computer will require that the user enter the recovery password or recovery key to start the computer. http://technet.microsoft.com/de-de/library/ee449438.aspx Juke Chou TechNet Community Support
July 17th, 2012 4:18am

Hi, After research, I found the following information. If the user wants to apply language settings to All users and system accounts. If this option is selected, it will change the local computer BCD settings (if the user-only option is selected, BCD settings are not changed). This change will result in a modification of a BCD setting to the new locale value. If you are using a TPM with BitLocker, this is interpreted as a boot attack on reboot and the computer will require that the user enter the recovery password or recovery key to start the computer. http://technet.microsoft.com/de-de/library/ee449438.aspx Juke Chou TechNet Community Support
Free Windows Admin Tool Kit Click here and download it now
July 17th, 2012 4:18am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics