So if this works it means bitlocker is useless.
Cute.
Edit: use a pin to unlock the bootloader kids.
No, this means the recovery key or other external unlocks have been lost, but the TPM chip is still working correctly to provide the bitlocker key during boot.
This is not bypassing bitlocker, simply bypassing loading the bsod causing crowdstrile driver by booting into safe mode. You still need a valid administrator account so authentication is also not compromised.
You would still need some kind of exploit to bypass the windows login screen.
Howso? It still requires authentication, same as if the laptop booted normally.
It means the drive isn't fully encrypted or the encryption is easy to bypass. That defeats the purpose of encrypting your drive.
If you can get to a login screen, you've compromised the device.
That’s not what it means.
Bit locker is encryption at-rest. Logging in with an admin account means the system is no longer “at rest”. The admin is fully authorized to be operating that system.
Are you under the impression that you have to enter a Bitlocker key during each boot?
Any system without network unlock usually requires a TPM PIN/PW every reboot. Your instructions (when read a certain way) imply that the command also bypasses the encryption without fetching a recovery key from the TPM or DC.
My home network (ISC DHCPD) behaves this way - either I type the TPM key or I type the 25-char key.
A community dedicated to the profession of IT Systems Administration
No generic Lemmy issue posts please! Posts about Lemmy belong in one of these communities:
!lemmy@lemmy.ml
!lemmyworld@lemmy.world
!lemmy_support@lemmy.ml
!support@lemmy.world