Questions tagged [bitlocker]
Microsoft Windows technology for full disk(volume) encryption.
2
votes
2answers
66 views
Bitlocker - “Recovery information was successfully backed up to Active Directory”, but not really?
I have a device that needs to have its' bitlocker recovery backup up to AD for visibility in the "Bitlocker Recovery" tab of the object in Active Directory.
I found that the device only had a TPM ...
1
vote
1answer
60 views
Windows encrypted software raid
Is it possible to have (preferrably with Windows-on-board tools of Windows Server 2012 R2 and Windows Server 2016) to have a software raid mirror on 2 encrypted disks? (Locally preferred.)
From what ...
21
votes
1answer
2k views
How do you check if a hard drive was encrypted with software or hardware when using BitLocker?
Due to the recent security findings in that probably most SSDs implement encryption in a completely naive and broken way, I want to check which of my BitLocker machines are using hardware encryption ...
1
vote
0answers
131 views
Cannot save BitLocker keys to ADDS for certain machines
We have several Windows 10 laptops (Win10 Enterprise, most running Build 1803, here in our main office and in multiple co-locations. We are implementing BitLocker company-wide and we have a GPO that ...
0
votes
1answer
54 views
After I enabled Bitlocker for the system drive the restart takes hours - and now?
In a Intel server from 2013 with Windows Server 2012 I installed a TPM Module last week. After that I enabled Bitlocker for one 2TB drive. It took many hours but at that time the rest of the server ...
-1
votes
1answer
438 views
Enable BitLocker with PowerShell on Windows Server 2016
I have been fighting with this, previously I believe I was able to set it up using the GUI in File Explorer like you would on a Windows 10 machine. However after installing the BitLocker feature and ...
0
votes
0answers
64 views
The input data was not in the expected format or did not have the expected value
So i installed mbam on the server and client and it works fine except it doesnt report to the server altough it is set up right.
when i look in the event manager i get this error:
The input data was ...
0
votes
0answers
1k views
Script to enable bitlocker in All Drive
I am trying to enable bitlocker in all domain joined user machines in my office.
I have used a Widows task scheduler script to enable bitlocker in all machines.
But the below code is enabling ...
0
votes
0answers
111 views
deploy silent mbam client install
I have a server with mbamserver installed and configured as needed with the group policy's and sql and stuff.
but now i want to roll it out to the clients in my network. i can install the mbamclient....
0
votes
0answers
18 views
Bitlocker hide menu
I configure a policy to save bitlocker key into AD DS which is working fine but I would like to remove this menu which show when you try to bitlocker the PC.
I dont want to save key on USB, Network ...
0
votes
1answer
52 views
Does BitLocker encrypt in-place?
I can't find explicit documentation on this anywhere: Is BitLocker doing an in-place encryption?
As to, I can actually encrypt my whole running system, with the Windows partition itself, without ...
1
vote
0answers
214 views
Checking which PCR triggered for BitLocker recovery
We have an MBAM server and tested policies which work normally for nearly every machine we've migrated. Though, I have seen 3 systems now that prompt for a recovery key instead of the users PIN. ...
3
votes
1answer
305 views
How to securely encrypt Hyper-V VMs in Failover Cluster
Having TPM 1.2 installed on 2x Dell x730, what options to encrypt user and network data in Failover Cluster?
I see Windows Server 2016 allows to passthrough the TPM to the VM. https://charbelnemnom....
0
votes
0answers
325 views
Is it possible for multiple users to mount a virtual hard drive?
We have a Windows Server 2012 R2 Essentials server and several Windows 10 Pro PCs. We have a drive on the server with all our company documents on which is shared over the network and mapped to all ...
0
votes
0answers
52 views
BitLocker Recovery Key on RODC
Is it possible to store the BitLocker Recovery Key on a RODC? If so, how would you go about it.
As I understand it the RODC is read-only and therefor you wont be able to "rewrite" the key as it ...
1
vote
1answer
311 views
Bitlocker not auto-unlocking C: drive on server 2008 R2
Here's the scenario. We'got a Dell PE T110 (I know, I know), that we've enabled Bitlocker via TPM. On reboots, it asks to re-enter the bitlocker key, and we have no idea why it's not auto-unlocking. ...
1
vote
0answers
188 views
Bitlocker on Hyper-V server
I have installed Hyper-V server on my new machine and then I added the Bitlocker function and initialized TPM. Now, I am trying to enable Bitlocker on the HDD.
I need:
encryption key saved on TPM
...
0
votes
1answer
301 views
Can I use manage-bde as a different domain user?
I use "manage-bde" in Powershell to remotely check the status of Bitlocker encryption on domain computers.
We have several connected domains, but for this lets say Domain1 and Domain2.
When I try to ...
1
vote
0answers
577 views
Bitlocker AD Key Protector problems
We use Bitlocker Active Directory Key Protector to protect and auto unlock USB drives but are seeing random failures to unlock.
We have two AD Groups that we use
DOMAIN\BitlockerAdmin (contains ...
0
votes
1answer
326 views
Bitlocker Network Unlock Cert
I am trying to setup Bitlocker Network Unlock in our domain and I have ran into a issue I can not seem to pass.
Little background. WINDOWS 2012 R2 WDS server, 2012 R2/2012 domain controllers (forest ...
7
votes
3answers
2k views
Is it possible to stop computers which aren't Bitlocker encrypted logging in?
Is it possible to somehow (startup script?) stop any unencrypted computers from being able to connect to the domain?
Environment:
Windows Active directory, 1000-ish computers, mostly bitlocker ...
0
votes
1answer
74 views
Implications of turning on bitlocker on a server
I have a server which contains some sensitive data and I feel like I should have bitlocker enabled on it. The problem is that the server has many floating licenses installed on it which the PCs on the ...
0
votes
1answer
130 views
Azure IAAS BEK KEK Bitlocker issue
I have an IAAS Disk Encryption question. I have successfully encrypted my machines using Bitlocker/BEK/Azure Key Vault. I'm trying to add the KEK layer on top so that I can run Azure Backup on the ...
1
vote
0answers
207 views
BitLocker with Auto-Unlock / SQL Server Services manually
I have a Window Server 2012 R2 Server (vmware) with a SQL Server Database running on it. For security purposes we installed BitLocker on it. The objective was to encrypt our “data at rest”. The ...
0
votes
1answer
738 views
Does disk encryption on a hyper-v partition work and is it effective and stable?
I have a new health care IT customer requirement. They're file server is a virtual 2012 R2 running on a Dell PE with 2012 R2 Hyper-V. The Dell PE with 2012 R2 Hyper-V server has two partitions. 1st ...
0
votes
1answer
44 views
User data recovery, Bitlocker not letting OS boot.
A user on our network recently could not boot into
their Windows 7 Enterprise laptop.
We have the BitLocker Key, and even after entering it
The installation will not get past the Windows logo.
It ...
4
votes
2answers
440 views
Protect mounted Bitlocker drive from other users
I have a Windows Server 2012 machine where I have created a VHD disk that is stored on my Desktop. That disk is encrypted by Bitlocker. However when I mount the disk and enter the encryption password, ...
1
vote
1answer
1k views
Double Bitlocker Recovery Tab in Active Directory
I've strange issue with double bitlocker tab having exactly same look. Any idea how I can remove one?
0
votes
2answers
2k views
Bitlocker Network Unlock certificate issue
I'm trying to enable Bitlocker Network Unlock feature. I followed this article:
https://technet.microsoft.com/en-us/library/jj574173(v=ws.11).aspx
My environment is:
Domain Functional Level: 2012
...
0
votes
1answer
337 views
Accidentally cleared TPM on BitLocked computer
One of my technicians was supposed to image a computer that has BitLocker enabled. He didn't know the access pin and instead inserted a Dell boot disk to do a soft-restore (keeping all of the clients ...
3
votes
1answer
3k views
How do I identify which bitlocker protector is active?
BitLockerVolume -MountPoint C).KeyProtector I see multiple RecoveryPassword key protectors, how do I know which one is active?
If I pull the HDD and plug it into another machine its going to ask me ...
4
votes
2answers
3k views
Reason for TPM lockout
We have several Surface Pro 3 devices deployed with BitLocker enabled in TPM + PIN mode. The devices have a TPM 2.0 chip and are running Windows 8.1 Pro.
We have an issue where users are occasionally ...
3
votes
2answers
11k views
Can bitlocker be used in the guest OS of HyperV Windows VM?
We are studying the possibility of using BitLocker inside the guest OS of VM (i.e. not the parent OS on the VM host). We have both Win2008R2 VM and Win2012(not R2) VM.
And we found this link:
https://...
2
votes
1answer
2k views
Encrypting mapped network drives in Windows
I have Win Server 2012 and the drives of one of the HDDs connected to it are mapped as network drives in a Windows 10 client. If I encrypt those drives using bitlocker with the user account on the ...
2
votes
1answer
2k views
Is it safe to delete old bitlocker keys from AD
So I have a bunch of old bitlocker keys stored with some computer accounts (the msFVE-RecoveryInformation attribute):
Bitlocker has re-run multiple times and every time it re-encrypts it generates ...
1
vote
0answers
87 views
How does bitlocker drive encryption recognize and accept system changes?
I'm relatively new to bitlocker drive encryption, although I do have a decent understanding of how it works. My question here is that, if I have a system that has bitlocker drive encryption enabled ...
2
votes
1answer
268 views
how do I view current tpm owner in windows?
How do I see if a TPM owner has already been set? All see are examples of how to clear the TPM, reset owner password, change owner. I just want to see if the owner is set and possibly who it is set to....
1
vote
0answers
49 views
Group policy setting to prevent asking user which encryption mode to use
Asked a similar question previously: Group policy setting to prevent asking user where to store recovery key
I'm trying to enforce the encryption mode to the new XTS-AES so that if the users ...
1
vote
3answers
6k views
How do I add bitlocker support commands to winpe?
Tried following this tutorial https://4sysops.com/archives/unlock-bitlocker-under-windows-pe/
But when I boot up my winpe image and try to run manage-bde I can "manage-bde is not recognized..."
Here ...
0
votes
1answer
544 views
Group policy setting to prevent asking user where to store recovery key
Win10 PCs, 2012R2 domain
I'm rolling out bitlocker to clients and I'm trying to restrict the options in the bitlocker wizard as much as possible.
I do need users to run the wizard so they can set a ...
6
votes
1answer
1k views
Can I recover a bitlocker encrypted drive offline?
Windows 10, server 2012 R2 domain
I'm confused about the options for recovering a bitlocker encrypted drive offline.
Lets say I'm encrypting the HDDs of domain computers with bitlocker using TPM (...
0
votes
1answer
60 views
Bitlocker decryption trouble
today I started the procedure to access a bitlocker encypted data storage hard disk. At first I unlocked it and then I turned off bitlocker.
The turning off took some time, but it ended without any ...
0
votes
1answer
669 views
Bitlocker not turning on: Windows 7 U 64bit
I am running Windows 7 Ultimate 64 bit with TPM 1.2. I originally had BitLocker turned ON with my C drive encrypted. I unfortunately had to reimage my system, load the image back up and try to turn ...
0
votes
1answer
1k views
How to deploy Bitlocker via WDS
Let's say I have a notebook without anything, no software, no operating system. Now I want to install Windows (with some programs) from my WDS. Which works just fine, but how do I tell Windows to ...
2
votes
0answers
627 views
Bitlocker says PIN is incorrect
I have new batch laptops to image, almost all of them are done but 2 of them (same models) have an issue I can't resolve. I enable bitlocker and make sure that its also recoverable by PIN. This works ...
1
vote
1answer
797 views
Bitlocker data drive opens as read only -
I have a virtualized Windows Server 2012R2 running on ESXi 6.0 There are 2 virtual disks in this system, an unencrypted C drive for the OS and a Bitlocker encrypted D drive for data sharing. Bitlocker ...
0
votes
1answer
1k views
How can I automatically unlock a Bitlocker To Go hard drive if no user is logged on?
I'm using external USB hard drives to backup my server (Windows Server Backup).
These drives are encrypted by Bitlocker To Go. I configured the disks to get unlocked automatically, because they are ...
5
votes
0answers
819 views
How do I fix a non-starting “Microsoft Key Distribution Service”? (not to be confused with Kerberos KDS)
The Microsoft Key Distribution Service is not starting on my DC (kdssvc.dll) and when I look at the event log under Microsoft\Kdssvc, I see the events:
Event ID 4001
Group Key Distribution ...
1
vote
1answer
664 views
Can't Enable Bitlocker
Why not?!
How can I find out why not?
I recently enabled Bitlocker without TPM in our domain controller:
Update
Thanks to Greg's 2nd comment I've discovered that I need a basic disk:
C:\Windows\...
1
vote
1answer
1k views
Bitlocker without TPM on Hyper-V 2012 r2 from the command line?
I know that Bitlocker can be used from a Hyper-V Server 2012 r2 install. And I know that it can be done on a machine that lacks a TPM chip. The problem is that all of the examples I've found depend on ...
