Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [bitlocker]

Microsoft Windows technology for full disk(volume) encryption.

2
votes
2answers
66 views

Bitlocker - “Recovery information was successfully backed up to Active Directory”, but not really?

I have a device that needs to have its' bitlocker recovery backup up to AD for visibility in the "Bitlocker Recovery" tab of the object in Active Directory. I found that the device only had a TPM ...
1
vote
1answer
60 views

Windows encrypted software raid

Is it possible to have (preferrably with Windows-on-board tools of Windows Server 2012 R2 and Windows Server 2016) to have a software raid mirror on 2 encrypted disks? (Locally preferred.) From what ...
21
votes
1answer
2k views

How do you check if a hard drive was encrypted with software or hardware when using BitLocker?

Due to the recent security findings in that probably most SSDs implement encryption in a completely naive and broken way, I want to check which of my BitLocker machines are using hardware encryption ...
1
vote
0answers
131 views

Cannot save BitLocker keys to ADDS for certain machines

We have several Windows 10 laptops (Win10 Enterprise, most running Build 1803, here in our main office and in multiple co-locations. We are implementing BitLocker company-wide and we have a GPO that ...
0
votes
1answer
54 views

After I enabled Bitlocker for the system drive the restart takes hours - and now?

In a Intel server from 2013 with Windows Server 2012 I installed a TPM Module last week. After that I enabled Bitlocker for one 2TB drive. It took many hours but at that time the rest of the server ...
-1
votes
1answer
438 views

Enable BitLocker with PowerShell on Windows Server 2016

I have been fighting with this, previously I believe I was able to set it up using the GUI in File Explorer like you would on a Windows 10 machine. However after installing the BitLocker feature and ...
0
votes
0answers
64 views

The input data was not in the expected format or did not have the expected value

So i installed mbam on the server and client and it works fine except it doesnt report to the server altough it is set up right. when i look in the event manager i get this error: The input data was ...
0
votes
0answers
1k views

Script to enable bitlocker in All Drive

I am trying to enable bitlocker in all domain joined user machines in my office. I have used a Widows task scheduler script to enable bitlocker in all machines. But the below code is enabling ...
0
votes
0answers
111 views

deploy silent mbam client install

I have a server with mbamserver installed and configured as needed with the group policy's and sql and stuff. but now i want to roll it out to the clients in my network. i can install the mbamclient....
0
votes
0answers
18 views

Bitlocker hide menu

I configure a policy to save bitlocker key into AD DS which is working fine but I would like to remove this menu which show when you try to bitlocker the PC. I dont want to save key on USB, Network ...
0
votes
1answer
52 views

Does BitLocker encrypt in-place?

I can't find explicit documentation on this anywhere: Is BitLocker doing an in-place encryption? As to, I can actually encrypt my whole running system, with the Windows partition itself, without ...
1
vote
0answers
214 views

Checking which PCR triggered for BitLocker recovery

We have an MBAM server and tested policies which work normally for nearly every machine we've migrated. Though, I have seen 3 systems now that prompt for a recovery key instead of the users PIN. ...
3
votes
1answer
305 views

How to securely encrypt Hyper-V VMs in Failover Cluster

Having TPM 1.2 installed on 2x Dell x730, what options to encrypt user and network data in Failover Cluster? I see Windows Server 2016 allows to passthrough the TPM to the VM. https://charbelnemnom....
0
votes
0answers
325 views

Is it possible for multiple users to mount a virtual hard drive?

We have a Windows Server 2012 R2 Essentials server and several Windows 10 Pro PCs. We have a drive on the server with all our company documents on which is shared over the network and mapped to all ...
0
votes
0answers
52 views

BitLocker Recovery Key on RODC

Is it possible to store the BitLocker Recovery Key on a RODC? If so, how would you go about it. As I understand it the RODC is read-only and therefor you wont be able to "rewrite" the key as it ...
1
vote
1answer
311 views

Bitlocker not auto-unlocking C: drive on server 2008 R2

Here's the scenario. We'got a Dell PE T110 (I know, I know), that we've enabled Bitlocker via TPM. On reboots, it asks to re-enter the bitlocker key, and we have no idea why it's not auto-unlocking. ...
1
vote
0answers
188 views

Bitlocker on Hyper-V server

I have installed Hyper-V server on my new machine and then I added the Bitlocker function and initialized TPM. Now, I am trying to enable Bitlocker on the HDD. I need: encryption key saved on TPM ...
0
votes
1answer
301 views

Can I use manage-bde as a different domain user?

I use "manage-bde" in Powershell to remotely check the status of Bitlocker encryption on domain computers. We have several connected domains, but for this lets say Domain1 and Domain2. When I try to ...
1
vote
0answers
577 views

Bitlocker AD Key Protector problems

We use Bitlocker Active Directory Key Protector to protect and auto unlock USB drives but are seeing random failures to unlock. We have two AD Groups that we use DOMAIN\BitlockerAdmin (contains ...
0
votes
1answer
326 views

Bitlocker Network Unlock Cert

I am trying to setup Bitlocker Network Unlock in our domain and I have ran into a issue I can not seem to pass. Little background. WINDOWS 2012 R2 WDS server, 2012 R2/2012 domain controllers (forest ...
7
votes
3answers
2k views

Is it possible to stop computers which aren't Bitlocker encrypted logging in?

Is it possible to somehow (startup script?) stop any unencrypted computers from being able to connect to the domain? Environment: Windows Active directory, 1000-ish computers, mostly bitlocker ...
0
votes
1answer
74 views

Implications of turning on bitlocker on a server

I have a server which contains some sensitive data and I feel like I should have bitlocker enabled on it. The problem is that the server has many floating licenses installed on it which the PCs on the ...
0
votes
1answer
130 views

Azure IAAS BEK KEK Bitlocker issue

I have an IAAS Disk Encryption question. I have successfully encrypted my machines using Bitlocker/BEK/Azure Key Vault. I'm trying to add the KEK layer on top so that I can run Azure Backup on the ...
1
vote
0answers
207 views

BitLocker with Auto-Unlock / SQL Server Services manually

I have a Window Server 2012 R2 Server (vmware) with a SQL Server Database running on it. For security purposes we installed BitLocker on it. The objective was to encrypt our “data at rest”. The ...
0
votes
1answer
738 views

Does disk encryption on a hyper-v partition work and is it effective and stable?

I have a new health care IT customer requirement. They're file server is a virtual 2012 R2 running on a Dell PE with 2012 R2 Hyper-V. The Dell PE with 2012 R2 Hyper-V server has two partitions. 1st ...
0
votes
1answer
44 views

User data recovery, Bitlocker not letting OS boot.

A user on our network recently could not boot into their Windows 7 Enterprise laptop. We have the BitLocker Key, and even after entering it The installation will not get past the Windows logo. It ...
4
votes
2answers
440 views

Protect mounted Bitlocker drive from other users

I have a Windows Server 2012 machine where I have created a VHD disk that is stored on my Desktop. That disk is encrypted by Bitlocker. However when I mount the disk and enter the encryption password, ...
1
vote
1answer
1k views

Double Bitlocker Recovery Tab in Active Directory

I've strange issue with double bitlocker tab having exactly same look. Any idea how I can remove one?
0
votes
2answers
2k views

Bitlocker Network Unlock certificate issue

I'm trying to enable Bitlocker Network Unlock feature. I followed this article: https://technet.microsoft.com/en-us/library/jj574173(v=ws.11).aspx My environment is: Domain Functional Level: 2012 ...
0
votes
1answer
337 views

Accidentally cleared TPM on BitLocked computer

One of my technicians was supposed to image a computer that has BitLocker enabled. He didn't know the access pin and instead inserted a Dell boot disk to do a soft-restore (keeping all of the clients ...
3
votes
1answer
3k views

How do I identify which bitlocker protector is active?

BitLockerVolume -MountPoint C).KeyProtector I see multiple RecoveryPassword key protectors, how do I know which one is active? If I pull the HDD and plug it into another machine its going to ask me ...
4
votes
2answers
3k views

Reason for TPM lockout

We have several Surface Pro 3 devices deployed with BitLocker enabled in TPM + PIN mode. The devices have a TPM 2.0 chip and are running Windows 8.1 Pro. We have an issue where users are occasionally ...
3
votes
2answers
11k views

Can bitlocker be used in the guest OS of HyperV Windows VM?

We are studying the possibility of using BitLocker inside the guest OS of VM (i.e. not the parent OS on the VM host). We have both Win2008R2 VM and Win2012(not R2) VM. And we found this link: https://...
2
votes
1answer
2k views

Encrypting mapped network drives in Windows

I have Win Server 2012 and the drives of one of the HDDs connected to it are mapped as network drives in a Windows 10 client. If I encrypt those drives using bitlocker with the user account on the ...
2
votes
1answer
2k views

Is it safe to delete old bitlocker keys from AD

So I have a bunch of old bitlocker keys stored with some computer accounts (the msFVE-RecoveryInformation attribute): Bitlocker has re-run multiple times and every time it re-encrypts it generates ...
1
vote
0answers
87 views

How does bitlocker drive encryption recognize and accept system changes?

I'm relatively new to bitlocker drive encryption, although I do have a decent understanding of how it works. My question here is that, if I have a system that has bitlocker drive encryption enabled ...
2
votes
1answer
268 views

how do I view current tpm owner in windows?

How do I see if a TPM owner has already been set? All see are examples of how to clear the TPM, reset owner password, change owner. I just want to see if the owner is set and possibly who it is set to....
1
vote
0answers
49 views

Group policy setting to prevent asking user which encryption mode to use

Asked a similar question previously: Group policy setting to prevent asking user where to store recovery key I'm trying to enforce the encryption mode to the new XTS-AES so that if the users ...
1
vote
3answers
6k views

How do I add bitlocker support commands to winpe?

Tried following this tutorial https://4sysops.com/archives/unlock-bitlocker-under-windows-pe/ But when I boot up my winpe image and try to run manage-bde I can "manage-bde is not recognized..." Here ...
0
votes
1answer
544 views

Group policy setting to prevent asking user where to store recovery key

Win10 PCs, 2012R2 domain I'm rolling out bitlocker to clients and I'm trying to restrict the options in the bitlocker wizard as much as possible. I do need users to run the wizard so they can set a ...
6
votes
1answer
1k views

Can I recover a bitlocker encrypted drive offline?

Windows 10, server 2012 R2 domain I'm confused about the options for recovering a bitlocker encrypted drive offline. Lets say I'm encrypting the HDDs of domain computers with bitlocker using TPM (...
0
votes
1answer
60 views

Bitlocker decryption trouble

today I started the procedure to access a bitlocker encypted data storage hard disk. At first I unlocked it and then I turned off bitlocker. The turning off took some time, but it ended without any ...
0
votes
1answer
669 views

Bitlocker not turning on: Windows 7 U 64bit

I am running Windows 7 Ultimate 64 bit with TPM 1.2. I originally had BitLocker turned ON with my C drive encrypted. I unfortunately had to reimage my system, load the image back up and try to turn ...
0
votes
1answer
1k views

How to deploy Bitlocker via WDS

Let's say I have a notebook without anything, no software, no operating system. Now I want to install Windows (with some programs) from my WDS. Which works just fine, but how do I tell Windows to ...
2
votes
0answers
627 views

Bitlocker says PIN is incorrect

I have new batch laptops to image, almost all of them are done but 2 of them (same models) have an issue I can't resolve. I enable bitlocker and make sure that its also recoverable by PIN. This works ...
1
vote
1answer
797 views

Bitlocker data drive opens as read only -

I have a virtualized Windows Server 2012R2 running on ESXi 6.0 There are 2 virtual disks in this system, an unencrypted C drive for the OS and a Bitlocker encrypted D drive for data sharing. Bitlocker ...
0
votes
1answer
1k views

How can I automatically unlock a Bitlocker To Go hard drive if no user is logged on?

I'm using external USB hard drives to backup my server (Windows Server Backup). These drives are encrypted by Bitlocker To Go. I configured the disks to get unlocked automatically, because they are ...
5
votes
0answers
819 views

How do I fix a non-starting “Microsoft Key Distribution Service”? (not to be confused with Kerberos KDS)

The Microsoft Key Distribution Service is not starting on my DC (kdssvc.dll) and when I look at the event log under Microsoft\Kdssvc, I see the events: Event ID 4001 Group Key Distribution ...
1
vote
1answer
664 views

Can't Enable Bitlocker

Why not?! How can I find out why not? I recently enabled Bitlocker without TPM in our domain controller: Update Thanks to Greg's 2nd comment I've discovered that I need a basic disk: C:\Windows\...
1
vote
1answer
1k views

Bitlocker without TPM on Hyper-V 2012 r2 from the command line?

I know that Bitlocker can be used from a Hyper-V Server 2012 r2 install. And I know that it can be done on a machine that lacks a TPM chip. The problem is that all of the examples I've found depend on ...