How can I fix a Bitlocker protected laptop which doesn't have a local admin account that's displaying the orange screen of death
Matthew Martinez
I have a BitLocker protected Win 10 laptop (no TPM, just password) that's suddenly displayed this orange screen with white vertical lines -
Windows 10 Shows Orange Screen with White Vertical Lines on boot
Once at this screen I can only reboot or go to the BitLocker recovery screen. No BIOS or firmware updates were done, but this could have been caused by some recent Windows updates.
The BIOS menu displays and so does the BitLocker recovery screen. Upon entering the BitLocker recovery screen I'm presented with advanced troubleshooting options - none of which I can use as I don't have a local admin account (looks like group policy stripped this out -the laptop is domain joined).
Given that I don't have a local admin account to run commands like "fixmbr" and perform a PC restore I'm pretty stuck - before I nuke the laptop and re-install the OS, I wanted to check if there are any options (I'm thinking something like running a Peter Nordahl boot disk and creating a local admin account)?
Thanks in advance
2 Answers
If there is no TMP you should be able to boot from a disk (PN, hirens) and try to fix the MBR or add/enable the local administrator account.
6What causes this error?
This issue is still developing and under investigation, but is suspected to be caused by the recent Microsoft Security Update KB3172985
Current workaround:
- Enter the BitLocker PIN/password blindly on the orange/blue screen. This should bypass the screen temporarily and allow you to log in to Windows.
- Uninstall the security update (KB3172985) and restart when prompted. It will still have the orange/blue screen at this point.
- Suspend BitLocker by opening the “BitLocker Drive Encryption” Control Panel applet and clicking “Suspend Protection” and then “Yes” to apply.
- Check for updates to automatically find and reinstall the security update.
- Reboot and the BitLocker PIN/password screen should appear normally.
Alternative workaround:
- If the issue is still present, re-enter the BitLocker PIN/password blindly on the orange/blue screen to boot into Windows.
- Suspend BitLocker by opening the “BitLocker Drive Encryption” Control Panel applet and clicking “Suspend Protection” and then “Yes” to apply.
- Open an Administrator Command Prompt by clicking Start, typing “CMD” without quotes, right-clicking the top search result and choosing “Run as administrator.”
- Then type the following command and click Enter: bfsvc.exe %windir%\boot /v
- Reboot the computer.