[kopija]

Našao sam.

[Device] encryption is enabled automatically so that the device is always protected. […] As part of [the out-of-box experience] preparation, device encryption is initialized on the OS drive and fixed data drives on the computer with a clear key that is the equivalent of standard BitLocker suspended state. […] If a device uses only local accounts, then it remains unprotected even though the data is encrypted

Dakle u kontradikciji s :

Device Encryption is a Windows feature that enables BitLocker encryption automatically for the Operating System drive and fixed drives.
When you first sign in or set up a device with a Microsoft account, or work or school account, Device Encryption is turned on and a recovery key is attached to that account.
If you're using a local account, Device Encryption isn't turned on automatically.

I najbolje od svega, Device Encryption =/ Bitlocker encryption.

Unlike a standard BitLocker implementation, device encryption is enabled automatically so that the device is always protected. When a clean installation of Windows is completed and the out-of-box experience is finished, the device is prepared for first use.

Uglavnom, totalni clusterfuck je boldano.

As part of this preparation, device encryption is initialized on the OS drive and fixed data drives on the computer with a clear key that is the equivalent of standard BitLocker suspended state. In this state, the drive is shown with a warning icon in Windows Explorer. The yellow warning icon is removed after the TPM protector is created and the recovery key is backed up.

E sad, to se odnosi na Home verziju, kak se Pro/Edu/Enterprise verzije ponašaju?