Regular warning regarding backups and data recovery with Windows 11 25H2 and Bitlocker encryption.

By default, new installations of Windows 11 25H2 have BitLocker automatically enabled, on laptops and desktops.

In theory, the BitLocker recovery keys are transferred to the online Microsoft Account settings when you login that way on Windows 11.

If you use a Windows local account only then it's not backed up. Nor are you prompted to do so. This is very obviously a potentially dangerous state.

If you're going with a local account only Windows 11 OS installation then:

  • Backup the recovery keys safely offline,

AND

  • Keep unencrypted backups of important data off the system (ideally several copies stored separately)

OR

  • Disable BitLocker

Unless you have a very specific use case or "interesting" threat model then disabling BitLocker is my suggestion.

Once BitLocker it's disabled then ensure you are taking regular backups of import data off the PC, ideally multiple copies in separate places for redundancy.

Hardware and storage media do fail. Motherboards and their TPM / UEFI Firmware data do get damaged. That's where the BitLocker encryption keys are stored.

If the BitLocker recovery information on the motherboard is damaged or unrecoverable, your BitLocker encrypted data will be unrecoverable without the recovery keys.

#Windows #BitLocker #MicrosoftAccount #25H2 #DataRecovery

Critical Windows 11 Sign-in Issues: An Easy Guide to Fix Login Problems

Windows 11 update KB5035853 is breaking Microsoft account sign-ins! Get solutions for login errors, blank screens, and accessing services like Outlook & Teams. Learn how to fix your Windows 11 sign-in issues.
#windows11 #microsoftaccount #loginfix #techhelp #windowsupdate

https://bulklayers.com/blog/windows-11-sign-in-issues-microsoft-account-not-working/

Microsoft Account (MSA) may no longer be a requirement for Windows 11!

When Windows 11 was released on October 5th, 2021, several people pointed out the biggest flaws of this version of Windows, especially when it comes to Microsoft Account. This outrage was so loud and heated that we even provided our opinion about how we approached the Microsoft Account requirement, which is negative.

Due to negative opinions outnumbering the positive ones when it comes to Microsoft Account, several workarounds were being proposed, with Microsoft closing them in an attempt to force more people to sign in to their Microsoft Account, especially when it comes to Windows 11 Home and Pro.

Now, Microsoft has announced that they’re committing to a better Windows 11 quality with a huge milestone that will happen this year, with this blog post being posted to the Windows Insiders Blog.

One of the improvements that will be made, alongside vertical taskbar, Copilot reduction, and other quality-of-life changes, Microsoft’s VP, Scott Hanselman, explained that he hated the Microsoft Account requirement with a simple tweet:

https://twitter.com/shanselman/status/2035110958314745891

However, this is just an update from the Windows VP indicating that he’s working on dealing with the Microsoft Account debacle that has been going on for over 4 years. The actual changes remain to be seen, and we won’t be able to see this change until Microsoft releases an update that contains all life-of-quality changes.

Meanwhile, you’ll be stuck with the current workarounds, such as “bypassnro” and Rufus (with unattend.xml), until this update actually arrives.

When Microsoft decides to remove the requirement, we will let you know.

To learn more about the remaining changes, here is the blog post.

Learn more #microsoft #MicrosoftAccount #MSA #news #Tech #Technology #update #Windows #Windows11
Is Microsoft looking at a Windows subscription model? - Hey Munky!

Microsoft are pushing back against local user accounts in Windows 11. They're really trying to go Microsoft Account Setup only..

Hey Munky!

If you need Windows 11 (e.g. in a VM/sandbox) but don't want to create a Microsoft account:

  • Turn off the Internet
  • Run setup until Win11 tells you, you need Internet.
  • Ctrl+ F10 and type in oobe\bypassnro
  • PC reboots
  • Do setup again and click the "I don't have Internet" button that now magically appears.
  • You're welcome!

    #windows11 #bypass #MicrosoftAccount

    Jetzt hat es mich endlich auch erwischt -- #Windows11 ist nach einem #UEFI-#Update plötzlich nicht mehr aktiviert. Natürlich war mein Key mit meinem #MicrosoftAccount assoziiert -- sollte also alles ganz einfach sein... Oder???

    Denkste.

    Zunächst war der #ActivationServer eine ganze Zeit nicht erreichbar -- kein Wunder, bei diesem Crap, den sich Microsoft da aus dem Kreuz drückt...

    Dann war der Server plötzlich erreichbar. In einem UI, welches aus den 1990er zu stammen scheint, [2/...]

    Microsoft enforces Microsoft Account and internet requirements in Windows 11 setup

    Microsoft is tightening the Windows 11 setup process, preventing users from easily bypassing the Microsoft Account requirement. Starting with preview builds 26220.6772 and 26120.6772, previously known commands such as BYPASSNRO and 'start ms-cxh:localonly' no longer allow users to skip online accoun... [More info]

    Microsoft enforces Microsoft Account and internet requirements in Windows 11 setup

    @aibot What do you think about Microsoft tightening Windows 11 setup to require Microsoft Accounts—does this improve security or just limit user freedom to create local accounts?

    [View original comment]

    Microsoft Cierra el Último «Truco» para Instalar Windows 11 sin Cuenta Online

    Microsoft ha lanzado una nueva vista previa de Windows 11 que elimina las facilidades para crear cuentas de usuario locales durante la instalación del sistema operativo. La compañía justifica esta acción por supuestos fallos en la configuración inicial (OOBE), exigiendo ahora una conexión a Internet y una cuenta de Microsoft obligatoria para la correcta configuración . Esta medida frustrará a muchos usuarios avanzados, aunque todavía existen métodos alternativos para evitar el registro en línea.

    El cambio, introducido en la vista previa Build 26220.6772 de Windows 11 para el programa Insider, se centra en modificar la Experiencia de Configuración Inicial (OOBE, por sus siglas en inglés). Históricamente, los usuarios avanzados y administradores de sistemas habían descubierto y utilizado varios métodos sencillos o «trucos» que permitían saltarse el requisito de iniciar sesión con una cuenta de Microsoft (MSA) y, en su lugar, configurar una cuenta local fuera de línea .

    Microsoft ha decidido eliminar estos bypass conocidos, argumentando que su uso provocaba problemas en el proceso OOBE y dejaba algunos dispositivos con una configuración incompleta. Para asegurar el «correcto» funcionamiento del sistema y la finalización adecuada de la configuración, la empresa de Redmond ahora exige la autenticación con una MSA activa y una conexión a internet durante el OOBE.

    Esta decisión es vista como un paso más en la estrategia a largo plazo de Microsoft para migrar a todos sus usuarios hacia ecosistemas en línea. A pesar de los intentos de la compañía por suavizar el cambio (como ofrecer una opción para personalizar el nombre de la carpeta de perfil de la cuenta en línea), la obligación de pasar por una MSA para la configuración inicial se mantiene firme.

    No obstante, el artículo señala que, aunque se cierran estas puertas fáciles, los usuarios con determinación y conocimientos técnicos aún disponen de alternativas para «ir por lo local». Herramientas de terceros como Rufus y Ventoy, así como las imágenes de instalación desatendidas, seguirán siendo viables para aquellos que busquen evitar el uso de una cuenta de Microsoft durante la instalación de Windows 11.

    #arielmcorg #CuentasLocales #infosertec #InstalaciónWindows #microsoft #MicrosoftAccount #OOBE #PORTADA #tecnología #Windows11