- Yes. Windows 10 and Windows 11 can automatically enable BitLocker (or “device encryption”) on internal drives when the hardware and firmware meet requirements and the system is configured for BitLocker. OEM devices commonly ship with BitLocker or automatic device encryption enabled by default to meet “secure by default” requirements. BitLocker can encrypt the Windows partition and additional data partitions as part of that configuration. BitLocker requires:
- A separate, unencrypted system partition that is active and used to boot Windows.
- An operating system partition and optional data partitions that can be encrypted.
- If
manage-bde -status D:reports:-
BitLocker Encrypted: Yes - A valid encryption method (for example,
XTS-AES 128) - And
manage-bde -protectors -get D:shows a numerical password protector with a Microsoft account backup,
manage-bdewould typically fail to recognize the volume as BitLocker‑protected rather than showing a complete configuration. -
- The context provided only states that BitLocker recovery keys can be backed up to a Microsoft account and that:
- BitLocker can store recovery information in Microsoft Entra ID or a Microsoft account to make recovery easier.
- Recovery information can be backed up and later used to unlock a BitLocker‑protected drive.
manage-bdeoutput shows that the protector’s backup type is “Microsoft account backup” and provides a Recovery Key ID, but the documentation does not describe a way to map that ID back to a particular Microsoft account from the local system alone. The only documented guidance in the context is that recovery keys must be retrieved from wherever they were backed up (for example, the Microsoft account or directory service that was configured when BitLocker was enabled). If that recovery key is not available, the documentation notes that access to the encrypted data is not possible and the only option is to format the drive and reinstall Windows. - The context confirms that:
- BitLocker can encrypt operating system and data partitions.
- Windows setup automatically configures disks to support BitLocker encryption.
- OEM devices and Windows 10/11 can enable BitLocker or device encryption automatically as part of provisioning.
Given the information in the context:
- The 48.83 GB partition is genuinely BitLocker‑encrypted.
- The encryption was likely applied automatically by Windows or the OEM configuration as part of device encryption/BitLocker provisioning.
- The BitLocker metadata and protectors are intact enough for
manage-bdeto recognize the volume and list a numerical password protector with Microsoft account backup. - Recovery of the data requires the correct BitLocker recovery key. If that key cannot be obtained from the Microsoft account or other backup location where it was stored, the documentation indicates there is no supported way to decrypt the volume, and the only remaining option is to delete/format the partition and reinstall.
References:
- BitLocker Drive Encryption
- BitLocker drive encryption in Windows 11 for OEMs
- BitLocker planning guide
- BitLocker recovery overview
- BitLocker configuration: known issues
- Hard drives and partitions
- I WANT TO FIND MY BITLOCKER RECOVERY KEY FOR MY COMPUTER - Microsoft Q&A I WANT TO FIND MY BITLOCKER RECOVERY KEY FOR MY COMPUTER