Asking advice on setting up a new Windows 11 Pro Machine

Topic

New Reply

Yes, I made the jump into getting a new computer. It is a non-store brand. Meaning I had it built. I am looking for advice in setting it up for the first time. No, I did not clone my old Hard Drive. I’m basically looking at the settings in GPE (Group Policy Editor) as in hopes to tame my computer from the likes of CoPilot. If that can be done still.

Reply | Quote

Replies

You need to be more specific.
Are you going to use a Local ID or a Microsoft ID. You will have more latitude to control things with a Local ID.
Do you use any of the MS subscriptions (Office 365, Microsoft 365, OneDrive etc)?
Are you going to use BitLocker (requires MS ID) or disk encryption?
What exactly, beside CoPilot, do you NOT want?
What are you going to use the PC for? Internet, email, games, streaming, video editing, etc?

Reply | Quote

I haven’t turned on the PC as of yet. I am gathering ideas.

I already have a Microsoft account, unless advised against using it. I’ll be using that.

I have no current MS Subscriptions, unless it comes with a free trial.

I see no need to be using BitLocker at any point.

Besides not wanting CoPilot. I can’t think of any off of the top of my head. I’d prefer to go along with Susan’s recommendations per se.

I’ll be using it for emails, streaming and listening to audio files via CD or of my FLAC files.

Reply | Quote

In the Pro version, Disk encryption is turned on by default. It is encrypted from the start. If you use a MS ID, the encryption key is stored on MS Server under the ID of the first MS ID to login on the machine. You will need to logon to MS with your ID and make a record of the key. Store in a safe place (locally) and un-encrypt the drive if you don’t want encryption.

Instructions for blocking CoPilot are here:
https://www.askwoody.com/forums/topic/9000002-blocking-copilot-in-windows-10-and-11-professional-sku/.
https://www.askwoody.com/forums/topic/9000004-blocking-copilot-in-edge/.
https://www.askwoody.com/forums/topic/9000003-blocking-copilot-in-microsoft-365/.

If you don’t intend to use One Drive (see the top article in this week’s Newsletter), I suggest disconnecting it from the computer BEFORE you transfer your data and deleting it from the Control Panel and Settings. You can always reinstall it from the MS Store if you so decide in the future.

Anything else, you’ll have to ask about the specific thing you want to change.

 

1 user thanked author for this post.

Lars220

Reply | Quote

PKCano wrote:

In the Pro version, Disk encryption is turned on by default. It is encrypted from the start.

One way to get around that is to use rufus to install.

 

1 user thanked author for this post.

Lars220

Reply | Quote

After you are up and running I would consider using:

O&O Shutup10++
a useful tweaking tool for both Windows 10 and 11.

There is an informative 6:30 minute YouTube video dated April 24, 2024 that reviews, shows, explains, and offers good “how to use” instructions for making system changes to things such as: Privacy, Edge, Windows Settings, Copilot, File Explorer, Lock Screen, Taskbar, Security, Windows Update, Microsoft Defender and more.
Less than 7 minutes and very good info.

Tweak and Debloat Your Windows 10 or 11 Computer Settings for Free with O&O ShutUp10++

Follow AskWoody O&O Shutup 10 Updated Topic here:
https://www.askwoody.com/forums/topic/oo-shutup-10-updated/

Amazing Truths Revealed: Link to Simply Magnificent AskWoody Knowledge Bases

1 user thanked author for this post.

PL1

Reply | Quote

Thanks. I downloaded the program. I’m not sure I need it though. I don’t want to screw anything up on my new computer.

Reply | Quote

O&O won’t screw your machine. Plenty here using it without issue.

cheers, Paul

Reply | Quote

Thank you Paul,

Coming from you, that’s very reassuring to know. I’ll try it out.

Reply | Quote

Do I need to log into my MS account since this computer wasn’t set up that way? I’d like to have more lateral control over my desktop PC. I already have a laptop signed into my MS account. I’ve already disabled CoPilot. Or do I need to log into my MS account to obtain the BitLocker information? I’m not sure if I need to log into my account.

Reply | Quote

Rush2112 wrote:

do I need to log into my MS account to obtain the BitLocker information?

If you need the key you have to log into Microsoft account.

Reply | Quote

If you create a Local Account on the computer when you set it up (instead of a Microsoft ID), you do not need to log into your Microsoft ID.

Reply | Quote

I am thinking strongly of signing into my MS account on this new computer. I feel there are more advantages for me as an everyday user with using my MS account than if I stayed logged into the local account. Yes, I know I’ll get a BitLocker key, but I can live with that. If a local account is what I am in. If I am wrong, please fill me in.

Reply | Quote

Next question:

Since I am not logged into my MS account. Is there another Bluetooth diagnostics tool besides Windows version? I have a Pluggable https://plugable.com/products/usb-bt5 Bluetooth adapter since my new computer didn’t come with Bluetooth installed. I have been experiencing intermittent cutting out of one of my headphones. I even moved the adapter to the front USB slot as recommended and still experiencing intermittent cutouts. Would I be better off if I logged into my MS account when diagnosing the issue???

Reply | Quote

Next question:

Is there any way to change the output directory of my https://www.freac.org/ audio converter v1.1.6 or v1.1.7 to my music storage drive i.e. E:/Music Files instead of the default C:/Users/Owner/Music/ selection? I have looked online, but nothing seems to be helpful. I did however, see in the settings in Windows Pro that I can change the output location where audio files are stored. But all that did was make an Owner directory in my Music storage drive. Is that the same thing? I’d rather have the FLAC files that I rip go into my Music files folder in my Music storage drive instead.

Any suggestions?

Reply | Quote

No need to find a solution. I accidentally stumbled on how to save to my music drive using Media Player. I assume the process is similar in freac’s settings. Though I am quite satisfied with how Media Player organizes by artist and then each album.

Reply | Quote

Rush2112 wrote:

do I need to log into my MS account to obtain the BitLocker information?

We have a utility that will allow you to backup the key locally.
https://www.askwoody.com/forums/topic/bitlocker-on-my-new-machine-is-the-disk-encrypted/

cheers, Paul

Reply | Quote

Do I need to have the BitLocker key? I do have a Windows 11 Pro laptop that I do not have it stored either? Is it vitally important to have both. Now on my laptop I am signed into my MS account with and BitLocker has been disabled. I guess I don’t fully understand BitLocker and what it pertains to Windows 11 or 11 Pro in my case for both computers.

Reply | Quote

If Bitlocker is disabled you do not need to do anything except backup.

However, I would not have a laptop without disk encryption, BL or Veracrypt, in case of loss / theft.

cheers, Paul

Reply | Quote

Paul T wrote:

If Bitlocker is disabled you do not need to do anything except backup.

Hi Paul T:

I turned off BitLocker a few years ago on my Win 10 Pro laptop, but my understanding is that if you turn OFF BitLocker (i.e., not just temporarily suspended BitLocker) that the associated recovery key is “destroyed” (invalidated / deleted) and there is no recovery key to back up. If you turn ON BitLocker again and re-encrypt your hard drive then a brand new recovery key is generated and you have to back up that new recovery key. Is that correct?

This is what my BitLocker Control Panel at Control Panel | System and Security | BitLocker Drive Encryption looked like back in 2020 when BitLocker was turned ON. I normally log in with a Microsoft Account so my recovery key was automatically backed up in my Microsoft account (see my image in post # 2587029 of Wheeler’s Bitlocker Recovery Key) but as an extra precaution I clicked the Backup Your Recovery Key link and printed out a hard copy of my recovery key that I stored in a safe location (which I was very happy to have on one occasion when my computer would not boot up until I entered my recovery key) AND saved my recovery key as a text file on a removable USB stick as described in the article Retrieving your bitlocker recovery key: a guide.

This is what I currently see at Control Panel | System and Security | BitLocker Drive Encryption since I turned OFF BitLocker. I no longer see the option to Backup Your Recovery Key since there is no recovery key to back up.

———–
Dell Inspiron 15 5584 * 64-bit Win 10 Pro v22H2 build 19045.4529 * Firefox v127.0.2 * Microsoft Defender v4.18.24050.7-1.1.24050.5 * Malwarebytes Premium v5.1.5.116-1.0.1252 * Macrium Reflect Free v8.0.7783

1 user thanked author for this post.

windbg

Reply | Quote

lmacri wrote:

re-encrypt your hard drive then a brand new recovery key is generated

This is true.
A basic tenet of encryption is never use the same key twice. Doing so makes comparison attacks possible.

If you turn BL off, the disk is decrypted and can be read by anyone with a bootable USB. This is why having it on for a laptop makes sense.

cheers, Paul

1 user thanked author for this post.

windbg

Reply | Quote

I have been getting this message over the past couple of days after signing into my MS account. I have been ignoring it. Should I continue to ignore it?

Reply | Quote

I would ignore it. You don’t need MS trying to make things all the same on the several machines you don’t use with that account.

cheers, Paul

2 users thanked author for this post.

TechTango, Cybertooth

Reply | Quote

If not required, switching the next item (“Share across devices”) off should hide the sign in prompt:

Reply | Quote