Questions tagged [bitlocker]

Microsoft Windows technology for full disk(volume) encryption.

Filter by
Sorted by
Tagged with
0 votes
0 answers
12 views

BitLocker add Numerical password [duplicate]

I want have on PC add Numerical Password. What should I do. Because how much I searching for information can't find any specific. Any advice? Because in other device Volume C: [Windows ] [OS Volume] ...
0 votes
2 answers
6k views

Script to enable bitlocker in All Drive

I am trying to enable bitlocker in all domain joined user machines in my office. I have used a Widows task scheduler script to enable bitlocker in all machines. But the below code is enabling ...
0 votes
0 answers
53 views

BitLocker Full Disk Encryption - WIN

I am encountering a recurring issue with BitLocker Full Disc Encryption (WIN) via Policy Management on Windows devices. The issue manifests as a failed encryption attempt due to the presence of ...
1 vote
2 answers
6k views

BitLocker with TPM: how to replace the numerical password recovery key protector with an alphanumeric password recovery key protector?

C:\Windows\system32>manage-bde -status BitLocker Drive Encryption: Configuration Tool version 10.0.17763 Copyright (C) 2013 Microsoft Corporation. All rights reserved. Disk volumes that can be ...
5 votes
1 answer
4k views

How do I fix a non-starting "Microsoft Key Distribution Service"? (not to be confused with Kerberos KDS)

The Microsoft Key Distribution Service is not starting on my DC (kdssvc.dll) and when I look at the event log under Microsoft\Kdssvc, I see the events: Event ID 4001 Group Key Distribution ...
0 votes
0 answers
140 views

Exclude Bitlocker encrypted USB from USB storage disable GPO in Windows Server?

I have a USB drive to move files between a domain and a standalone PC. The USB drive is encrypted with BitLocker and can be used between a domain client pc and the standalone. On my domain there is a ...
0 votes
0 answers
73 views

Configuring Windows Workstations to use their TPM in Bit Locker for all drives?

I have a bunch of AD-integrated workstations that will need to use BitLocker. They all have TPM 2.0 installed, and my overall goal is to get BitLocker set up and using the TPM for both the OS drive ...
0 votes
3 answers
664 views

Do i need to encrypt the OS drive with Bitlocker if i store data only on a second different drive in the same PC?

I have a PC with two drives in it. One is used for OS and programs only and the other one is used to store data. I want to encrypt my data to prevent the PC to be stolen and for the thieves to ...
0 votes
1 answer
751 views

Is Bitlocker automatic unlock not safe?

I don't get how "automatically unlock" Bitlocker feature works on Windows 10. I have a main SSD with OS installed in it that's encrypted with bitlocker and another drive encrypted with ...
2 votes
2 answers
2k views

Checking which PCR triggered for BitLocker recovery

We have an MBAM server and tested policies which work normally for nearly every machine we've migrated. Though, I have seen 3 systems now that prompt for a recovery key instead of the users PIN. ...
0 votes
0 answers
128 views

Server 22, GPO & Bitlocker

I am having similar issues to this Bitlocker GPO automatic? However mine is not permissions based. It does not matter what user I log in as normal user to domain admin. RSOP shows the policies applied,...
0 votes
1 answer
4k views

Best method for enabling bitlocker via GPO/scripting

I'm working on getting bitlocker deployed across an organization and am getting hung up on how I'm expected to actually enable it. We're using on-site AD on Server2012 (will be moving to 2022 this ...
1 vote
0 answers
51 views

"There are currently no power options available" message when using BitLocker on Windows

I have a Windows 10 IoT Enterprise version 21H2 (not in a domain). I encrypted C partition using BitLocker configured to auto-unlock using the TPM module of the PC. Each time I enable BitLocker, the &...
3 votes
5 answers
16k views

How do I add bitlocker support commands to winpe?

Tried following this tutorial https://4sysops.com/archives/unlock-bitlocker-under-windows-pe/ But when I boot up my winpe image and try to run manage-bde I can "manage-bde is not recognized..." Here ...
0 votes
1 answer
1k views

Can Bitlocker be applied to a shared volume of the Windows 2022 server? + SMB Encryption?

Our school has a remote file server (Windows 2022 virtual server on a colo) that provides network shared drives. We have both Windows and MacOS clients accessing it through SMB. Recently our IT Sub-...
3 votes
1 answer
5k views

Double Bitlocker Recovery Tab in Active Directory

I've strange issue with double bitlocker tab having exactly same look. Any idea how I can remove one?
3 votes
1 answer
3k views

Enable-Bitlocker -TpmProtector via GPO does not work (0x80070522)

I am trying to automate the bitlocker in our corporate environment. I have written a script which enables the bitlocker and it works fine if I run it manually, but whenever I implement it via GPO (...
31 votes
2 answers
22k views

How do you check if a hard drive was encrypted with software or hardware when using BitLocker?

Due to the recent security findings in that probably most SSDs implement encryption in a completely naive and broken way, I want to check which of my BitLocker machines are using hardware encryption ...
0 votes
2 answers
3k views

Bitlocker Network Unlock certificate issue

I'm trying to enable Bitlocker Network Unlock feature. I followed this article: https://technet.microsoft.com/en-us/library/jj574173(v=ws.11).aspx My environment is: Domain Functional Level: 2012 ...
3 votes
1 answer
2k views

Automatic unlock bitlocker to go (usb stick) on domain computer

Is there a way to automatically unlock bitlocker encrypted USB sticks on windows computers that are domain joined (8.1 Enterprise)? (e.g., based on the "BitLocker identification Field"?) The scenario ...
2 votes
1 answer
3k views

Bitlocker data drive opens as read only -

I have a virtualized Windows Server 2012R2 running on ESXi 6.0 There are 2 virtual disks in this system, an unencrypted C drive for the OS and a Bitlocker encrypted D drive for data sharing. Bitlocker ...
-2 votes
1 answer
620 views

Solution to remotely unlock bitlocker on domain [closed]

I'm looking for a solution to remotely (on site, connected to our domain) unlock bitlocker on laptops. After a few research, I found that this is quite possible with BitLocker Network Unlock, but what ...
0 votes
1 answer
748 views

Bitlocker Encryption on RAID 0 kicks drive out of array half-way through

After hunting around for answers, I found some for the question: "Does Bitlocker support RAID on Windows". The answer seems to be that hardware RAID is supported. I've got a RAID 0 drive ...
0 votes
1 answer
8k views

How to make GPO not apply to certain OU's

I am having issues to make a GPO not apply to a certain OU. I have a bitlocker GPO that uses password on domain level. (so applies to every ou) but I want it to exclude the computer and users that ...
0 votes
1 answer
543 views

Hyper-V, BitLocker usage both on the virtualized system and the drive of the host system

Using Hyper-V on a Windows 10 Pro computer, all Hyper-V VM related data is stored on a non-system secondary SSD: D:\. I know that you can use BitLocker in the VMs themselves, by enabling TPM support ...
3 votes
2 answers
3k views

Certificate expiration does not match validity period in template (Windows CA)

I'm trying to request a new Bitlocker DRA certificate from my internal CA. The template is set to two years, as shown here Template I'm trying to request a new certificate via the Certificates MMC ...
6 votes
9 answers
2k views

Recommended drive encryption solution

I will soon be purchasing a number of laptops running Windows 7 for our mobile staff. Due to the nature of our business I will need drive encryption. Windows BitLocker seems the obvious choice, but it ...
0 votes
2 answers
689 views

Using InTune for BitLocker enabling TPM+PIN+USB

I am tasked with enabling BitLocker via InTune and I am struggling to understand why the following settings are not taking effect on the endpoint. In the OS drive settings Compatible TPM Startup - ...
0 votes
1 answer
811 views

Can we prevent Windows from marking NVMe drives as removable?

I've noticed recently that when adding NVMe drives to Windows, it has a tendency to mark them as removable. I think this is more likely on "enterprise" NVMe SSDs, at least in my experience. ...
0 votes
1 answer
2k views

How do I disable Bitlocker Encryption settings using Intune?

We've activated Intune Bitlocker encryption and configured it needs a password to unlock. Since we don't want our users to change the Bitlocker pin, we want to disable the Settings below. Bitlocker ...
0 votes
1 answer
249 views

Bitlocker Auto-Unlock C drive with TPM

I wanted to enable auto-unlock on C drive with TPM. When I click on enable bitlocker on C Drive, it shows me only 2 options Insert a USB drive Enter a password I do not see any option which says ...
0 votes
1 answer
868 views

Bitlocker Recovery Keys not showing in active directory suite

I recently asked this same question here about a month ago -> BitLocker Recovery Keys Not Showing in Active Directory But things have changed now and I am still getting the same results. I am going ...
0 votes
2 answers
4k views

BitLocker Recovery Keys Not Showing in Active Directory

I have been working on this all last week and this week and have made no progress. I am working in active directory and group policy and need to store the bitlocker recovery keys in the bitlocker tab. ...
0 votes
1 answer
433 views

Bitlocker GPO automatic?

I was wondering if someone else has accomplished on what im trying to do i have GPO to automatic stores the keys in the AD when activated the bitlocker, but it seems that i have to do it manually, so ...
8 votes
2 answers
12k views

Cloning a bitlocker encrypted disk

Our company's had its laptops for just over 2 years now and they have all become slow and many of them have had their harddisks dying randomly lately. I noticed that many of my colleagues use a tilted ...
0 votes
1 answer
587 views

What powershell module to import in order to run "Read-ADRecoveryInformation"?

I tried to run Read-ADRecoveryInformation but hit with this infamous error message. I tried the following cmdlets to look for the module but I could not find it. Get-command -Module ...
-4 votes
1 answer
789 views

How to add credentials to bitlocker script

I'm trying to create a script to see if the bitlocker works or not. If it works, then a file is posted in the c:\ folder We will call "yes" if the bitlocker does not work then add password ...
0 votes
1 answer
341 views

win10 bitlocker enrypts partition after update

one of my clients has an laptop with Win 10. After the client run the latest Updates apparently BitLocker started to encrypt the files/Partition WITHOUT CONSENT and WITHOUT PROVIDING ANY RECOVERY KEYS....
5 votes
1 answer
1k views

BitLocker on Hyper-V Server 2019 - Failed - The system cannot find the file specified

To start with, I want to be clear that this is on "Hyper-V Server 2019" (free headless hypervisor) and not "Windows Server 2019" with the Hyper-V role installed. I've been banging ...
-1 votes
1 answer
2k views

Bitlocker drive encryption after PC rename or removing from domain

I've the script and gpo for the bit-locker drive encryption and it successfully writing the encryption key to the AD object. Now what I can't find anywhere to test is what will happen in case the PC ...
2 votes
2 answers
2k views

Bitlocker - "Recovery information was successfully backed up to Active Directory", but not really?

I have a device that needs to have its' bitlocker recovery backup up to AD for visibility in the "Bitlocker Recovery" tab of the object in Active Directory. I found that the device only had a TPM ...
0 votes
1 answer
109 views

When recovering a drive from within Microsoft BitLocker Administration and Monitoring (MBAM), why are you asked for a reason for recovering the drive?

When choosing to decrypt a drive via MBAM, I've noticed a combo box that asks the user to choose a reason for decryption - several possible options are listed including a lost PIN. What's the ...
0 votes
1 answer
62 views

Mapped Harddrive, Bitlocker? [closed]

All the available letters to use for harddrive, i used up. So for my new harddrive, i used mapping. So i have mapped my new harddrive to a folder. My question is, is it possible to still get ...
0 votes
2 answers
76 views

Bitlocker my LAN

I have a Windows Server 2012 R2 LAN that is working great. I recently have been given the task to encrypt the data at rest. I would like to use bitlocker, but all the documentation is for ...
0 votes
1 answer
482 views

Lock-Bitlocker after Robocopy - access denied

I'm trying to create a backup script that unlocks an external bitlocker drive, robocopies files to it, then locks it when it's done. I am able to unlock and copy just fine, but the final step of "Lock-...
4 votes
0 answers
132 views

Bitlocker - mainboard exchange won't require recovery password - why?

A mainboard died. It was exchanged for the same board type (same bios and config, as well, also a new CPU but of the same type). The hard drive is encrypted with bitlocker (on Win10 Pro v1903) and I ...
1 vote
0 answers
57 views

Bitlocker sometimes shows as active instantly once policies set

So the setup is that we have a bunch of laptops for staff which connect to Windows Server (2012) AD. We have an AD group (I didn't set it up so not 100% sure of policies set) that allows Bitlocker ...
2 votes
1 answer
260 views

Is my plan for Bitlocker deployment missing anything?

1.) Confirm that TPM is activated in the BIOS of all workstations.  - All of these workstations are using Windows 10 Pro, which I believe automatically activates the TPM chip when the OS is installed ...
1 vote
1 answer
61 views

How to protect data on Windows Server

I'm renting an unmanaged dedicated (physical) server, running Windows Server (currently 2012 R2, but it can be changed to another version of the Standard edition). I have a custom Windows service ...
0 votes
1 answer
1k views

Lock removable drives to domain/network with BitLocker

I have a network/domain of PCs that users use and don't have administrative privileges. Occasionally, they copy some data to USB drives to move between machines. I need to prevent data written to ...