A company laptop somehow dropped out of our Entra and Intune environment. I found the device in recently deleted Entra devices and restored it, which gave me access to the BitLocker recovery key, but the laptop is no longer enrolled and only shows an unknown local admin account at startup.
I don't know the admin password. A Windows reset consistently fails partway through, even with BitLocker available. Hiren's Boot doesn't detect the encrypted drive, and attempting to unlock it from the command line returns "The parameter is incorrect." A Windows 11 USB installer also boots, but the internal drive does not appear as an installation target.
I eventually disabled BitLocker, but resets still failed. I was trying to determine whether this was a storage-driver or hardware issue, or whether I needed to replace the SSD. The problem was ultimately resolved by changing the BIOS storage mode from RAID to AHCI.
4 Answers
The missing local admin account may be related to the device’s management state. A device can fall out of Intune or Entra while still retaining an old local account, and the rotating LAPS password may no longer be available. If the machine needs to be preserved rather than wiped, the management and Autopilot records should be checked first.
BitLocker shouldn’t prevent you from wiping the disk and reinstalling Windows. If the installer cannot see the internal drive, check the BIOS storage setting first. Many laptops ship in RAID or Intel RST mode, while a standard Windows installer may not include the required driver. Switching the controller from RAID to AHCI made the drive appear and resolved this case.
If changing RAID to AHCI does not help, check whether the installer needs the manufacturer’s storage or Intel RST driver. Other options for a machine that can be safely erased are the vendor’s recovery environment, a BIOS or UEFI secure-erase tool, or connecting the SSD to another computer and wiping it there.
If the data is not needed, boot from the Windows installation USB, open Command Prompt with Shift+F10, and use DiskPart to select the internal disk, clean it, and create a fresh partition. Double-check the disk number before running clean, since it permanently removes the data. BitLocker protects the contents; it does not stop the drive from being erased.
Related Questions
Can't Load PhpMyadmin On After Server Update
Redirect www to non-www in Apache Conf
How To Check If Your SSL Cert Is SHA 1
Windows TrackPad Gestures