{"id":525,"date":"2019-02-05T20:40:15","date_gmt":"2019-02-06T02:40:15","guid":{"rendered":"http:\/\/zewwy.ca\/?p=525"},"modified":"2019-02-05T20:40:15","modified_gmt":"2019-02-06T02:40:15","slug":"another-bitlocker-problem","status":"publish","type":"post","link":"https:\/\/zewwy.ca\/index.php\/2019\/02\/05\/another-bitlocker-problem\/","title":{"rendered":"Another BitLocker Problem"},"content":{"rendered":"

<\/span>The Story<\/strong><\/span><\/h1>\n

I’ll keep this one short as I have a lot of things to do and this was an interesting find.<\/p>\n

So I had to deploy some new laptops, did my usual trick with multiple systems, grab the latest version of Windows,run spiceworks decrapifier, install all updates, install Office, install all updates, install a couple third party software, clean.<\/p>\n

Then cleanup the default profile. there have been issues with the “CopyProfile” option that MS supports with an XML file during sysprep, not only have there been known issues but this is total rubbish when it used to be a button. I reallllllllly hate this move by MS, there are times you want to configure the default profile and not sysprep (family computer anyone?)<\/p>\n

Well ok enough of that MS rant (there are many) if you need help configuring the default profile check out this guys blog “scribbleghost”<\/a> who sources the same one I originally followed by “Jose Espitia”<\/a> which I think has a cleaner look and feel. IMHO<\/p>\n

This was so far the cleanest, smoothest deployment I’ve done so far, and I haven’t hit a single snag, I also haven’t had to deal with Forenstics “DefProf” leaving lingering services with the above blog posts. Or other anomies by their profile migration tool.<\/p>\n

Instead I suggest admins look into Ehlers “User State Migration Tool GUI”<\/a> he basically took MS’s new user migration “tool” *cough* cmd line based app *cough* which normally would have someone digging through endless cmd parameters and syntax requirements (I only like doing this if I have to script, outside of that give me a damn GUI MS) Well no worries this guy did it. (it’s worth the cost, buy it).<\/p>\n

OK now that allllll that is out of the way, what the heck was the issue man?!?!<\/p>\n

So I go to BitLocker one of the deployed systems and BAM! Error in my face in particular Error code: 0x8004259A<\/p>\n

so go to google, and my first attempts were not successful as it seems no bit locker reference to this error code has been shown. After some more searching I it this MS support page<\/a> with some more English understandable definition of the code:<\/p>\n\n\n\n
0x8004259A<\/p>\n

VDS_E_SHRINK_DIRTY_VOLUME<\/td>\n

The volume selected for shrink might be corrupted. Use a file system repair utility to fix the corruption problem and then try to shrink the volume again.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Alright well this is something…<\/p>\n

<\/span>The Solution<\/strong><\/span><\/h1>\n

On my particular laptop that I first tested on (and I only was on my first other test deployment after mine) in which I forgot to enable BitLocker, as other systems leave the office more than Mine ever does. I was able to reproduce the error.<\/p>\n

Yet on my laptop CHKDSK always returned clean, what gives, yet shrinking the volume and re-extending it resolved the issue for me…<\/p>\n

Until I went to do the same on the first deployed laptop only to find it was telling me I was unable to shrink due to corruption (sure this one picks up on something; remember I shrink the data partitions before making my base image to make DDing it onto other system much faster).<\/p>\n

So this time a CHKDSK \/f, and a rebooted made chkdsk clean the disk, and without shrinking or expanding was able to run BitLocker!<\/span><\/p>\n

Another win for today!<\/p>\n","protected":false},"excerpt":{"rendered":"

The Story I’ll keep this one short as I have a lot of things to do and this was an interesting find. So I had to deploy some new laptops, did my usual trick with multiple systems, grab the latest version of Windows,run spiceworks decrapifier, install all updates, install Office, install all updates, install a … <\/p>\n

Continue reading “Another BitLocker Problem”<\/span><\/a><\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"sfsi_plus_gutenberg_text_before_share":"","sfsi_plus_gutenberg_show_text_before_share":"","sfsi_plus_gutenberg_icon_type":"","sfsi_plus_gutenberg_icon_alignemt":"","sfsi_plus_gutenburg_max_per_row":"","footnotes":""},"categories":[8],"tags":[153,91],"class_list":["post-525","post","type-post","status-publish","format-standard","hentry","category-server-administration","tag-0x8004259a","tag-bitlocker"],"_links":{"self":[{"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/posts\/525","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/comments?post=525"}],"version-history":[{"count":1,"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/posts\/525\/revisions"}],"predecessor-version":[{"id":526,"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/posts\/525\/revisions\/526"}],"wp:attachment":[{"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/media?parent=525"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/categories?post=525"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/tags?post=525"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}