Job log · Where the limit falls · PLY-2025-0330
The Reader No Longer Recognised Her Thumb.
That ProBook had opened to her thumb from the day it came out of the box. An update ended the arrangement — the fingerprint box has vanished off the login screen
— so all she had left was a PIN chosen during that first afternoon and untouched ever since: I entered it once and after that the reader did everything
. Four wrong guesses and she was locked out. Payroll week, four clients over at Newquay waiting on her, and eight years of other people's accounts
sitting on the drive.
Sounds like yours? Talk it through.
0800 6890668
Why it happens.
There are two possible locks here and they have no relationship to each other. Pull the module, put it on bench hardware, and a few minutes will tell you which one you are dealing with. A Windows password protects an account and goes no further; the sectors underneath are untouched by it. That sign-in screen had kept her out for a week, yet read the flash directly and it does not enter into things. BitLocker is another matter. It encrypts a volume from one end to the other. Without the key — or a recovery password doing duty for it — anything lifted off the flash arrives as noise, and this bench gets no exception. One of those is a few hours at the bench. The other one is shut, to us as much as to anybody. Working out which of them applies costs nothing, which is why it happens before anything else.
The kit this job called for.
How the job runs →| The kit | What it did here | Why we keep it |
|---|---|---|
| Atola Insight Forensic | Copied the NVMe from behind a write blocker, before anyone had mentioned keys | Parallel copies behind a hardware write block, each step written to the log |
| PC-3000 SSD | Proved the module in good health, so nothing sitting behind the lock was broken | Speaks to the flash controller directly, beneath whatever the operating system chooses to report |
| UFS Explorer Professional Recovery | Mounted the unencrypted volume immediately; the other waited on its key | Mounts what other software will not: APFS, ReFS, XFS, ZFS and Btrfs volumes |
How it ran.
Image it before the lock even comes up
Imaging went first, ahead of every other consideration. The module came out of the chassis, went onto a hardware write blocker and was copied there. That habit repays itself twice on a job like this. Should anybody later ask who the laptop belongs to, or what was done to it here, the module can be shown in precisely the condition it turned up in. And where nobody ever asks, the precaution has cost nothing at all.
Read the headers before you quote a price
A minute spent on headers established where matters stood. The first volume was ordinary NTFS carrying the system, and taken directly the sign-in that had blocked her all week meant nothing at all. The second held the ledgers, and a BitLocker signature alongside them. She had switched it on years before, prompted by a checklist from her professional body, and had then put it out of mind. The written quote covered both volumes.
Hunt for the printed key before conceding anything
BitLocker tells you which key it is after. We gave her that identifier on the telephone. She was adamant that no such document had ever arrived. Then she remembered Windows nagging her to print something that had meant nothing to her then. It sat in a ring binder, one sheet behind her practising certificate. First try, and the volume opened. Had that sheet not existed it would have stayed closed, and we would have told her as much.
How it ended up.
Both volumes went back to her. Nothing on the system side suggested a lock had ever been in place; the ledgers opened to a page printed years earlier and ignored ever since. Payroll left forty-eight hours behind schedule, written to fresh media. Three separate places now hold the recovery key, and the laptop is not among them.
Pages people open after this.
Jobs that reached a limit.
Seeing the same thing?
Leave it switched off and post it in. Nothing happens until the diagnosis, which lists what can still be read and what cannot.