How to not break your windows 11 laptop when installing Linux.

# Windows 11 🪟

How to boot linux along side Windows 11 + bitlocker

There is some challenge here, and the operaton have to be orchestrated properly if you don’t want to be put outside windows.

# Resize C:

From inside Windows As Admin

• suspend bitlocker (?)
• resize system partition to have freespace for linux

# Disable Secure boot

• suspend bitlocker (from Windows) (DO NOT decrypt / disable)
• restart quickly → otherwise bitlocker re-enable itself in 30 s
• disable secure boot in BIOS
• check that windows is still starting without complaining (and asking for recovery key)
  • if this happens => enable secure boot and make sure that bitlocker was really suspended and retry

Notes doing so, you are disabling TPM and fingerprint login won’t work anymore on windows

# Install Linux 🐧

• suspend bitlocker again (from Windows) (safe but is required?)
• restart quickly
• boot linux installer (now that secure boot is disabled)

# Dedicated EFI ⮺

• unflag boot flag from existing windows EFI (so that linux installer won’t pick it up)

$ fdisk -l       # lookup for disk drive
$ parted /dev/xx
# remove boot, esp flag
set 1 boot off
q

Then proceed to install

• create new EFI partition of 512MB (EFI System Partition)
• create /
• create /home

Choose the new EFI as “device for boot loader installation”

# Encrypted setup LUKS ⮺

Trick to set it up in the installer

• choose erase all
• set LUKS
• change the install to something else

# Finalize

If you have removed the boot flags you have to set them back

• choose continue testing

$ fdisk -l       # lookup for disk drive
$ parted /dev/xx
# enable boot, esp flag
set 1 boot on
q

# Adding Grub

TBD / use bios for now

# Restoring Secure Boot ⮺

TBD

# Intune

Microsoft Intune is a cloud-based device and application management service used by organizations to control and secure employee devices and data.

In simple terms, its purpose is to help companies manage how devices (like laptops, phones, and tablets) are used for work.

# Install Edge

mikemdm

# Install intune app

Get the Microsoft Intune app for Linux

A sample script to install the Microsoft Intune app and its dependencies on your device is available on GitHub. Review the instructions carefully before installing.

# Ubuntu 24.04 LTS

setup repo

$ sudo apt install curl gpg

$ curl https://packages.microsoft.com/keys/microsoft.asc | gpg --dearmor > microsoft.gpg
$ sudo install -o root -g root -m 644 microsoft.gpg /usr/share/keyrings
$ sudo sh -c 'echo "deb [arch=amd64 signed-by=/usr/share/keyrings/microsoft.gpg] https://packages.microsoft.com/ubuntu/24.04/prod noble main" > /etc/apt/sources.list.d/microsoft-ubuntu-noble-prod.list'

$ sudo rm microsoft.gp

install

$ sudo apt update
$ sudo apt install intune-portal

Then launch the intune-app

# Password Check

Intune may complain that password constraint are not compliant

cf Linux Intune Password Compliance

# Microsof Teams ⮺ 🗨️

I choose the Flatpak methods

• linuxmint is avoiding snaps
• flatpak is supported natively in linuxmint Software Manager

# OneDrive ⮺ 🛢️

TBD

see also

• top 3 OneDrive clients for Linux

rclone looks good

• Mounts OneDrive as a filesystem → appears directly in Nemo sidebar
• No full sync required (on-demand access possible)
• Very stable and widely used

# Why Use OneDrive on Linux? ⮺

• Cross-platform compatibility: If you work across different operating systems, OneDrive allows you to access your files regardless of whether you are using Windows, macOS, or Linux.
• File sharing: You can easily share files and folders with colleagues, friends, or family members using OneDrive’s sharing features.
• Backup: OneDrive serves as a backup solution for your important files, protecting them from local hardware failures.