Questions tagged [bitlocker]
Microsoft Windows technology for full disk(volume) encryption.
124
questions
-1
votes
1answer
26 views
Bitlocker drive encryption after PC rename or removing from domain
I've the script and gpo for the bit-locker drive encryption and it successfully writing the encryption key to the AD object.
Now what I can't find anywhere to test is what will happen in case the PC ...
0
votes
1answer
24 views
When recovering a drive from within Microsoft BitLocker Administration and Monitoring (MBAM), why are you asked for a reason for recovering the drive?
When choosing to decrypt a drive via MBAM, I've noticed a combo box that asks the user to choose a reason for decryption - several possible options are listed including a lost PIN. What's the ...
0
votes
1answer
30 views
Mapped Harddrive, Bitlocker? [closed]
All the available letters to use for harddrive, i used up.
So for my new harddrive, i used mapping. So i have mapped my new harddrive to a folder.
My question is, is it possible to still get ...
0
votes
2answers
52 views
Bitlocker my LAN
I have a Windows Server 2012 R2 LAN that is working great. I recently have been given the task to encrypt the data at rest. I would like to use bitlocker, but all the documentation is for ...
0
votes
1answer
159 views
How to make GPO not apply to certain OU's
I am having issues to make a GPO not apply to a certain OU.
I have a bitlocker GPO that uses password on domain level. (so applies to every ou) but I want it to exclude the computer and users that ...
0
votes
1answer
151 views
Lock-Bitlocker after Robocopy - access denied
I'm trying to create a backup script that unlocks an external bitlocker drive, robocopies files to it, then locks it when it's done. I am able to unlock and copy just fine, but the final step of "Lock-...
4
votes
0answers
66 views
Bitlocker - mainboard exchange won't require recovery password - why?
A mainboard died. It was exchanged for the same board type (same bios and config, as well, also a new CPU but of the same type).
The hard drive is encrypted with bitlocker (on Win10 Pro v1903) and I ...
1
vote
0answers
47 views
Bitlocker sometimes shows as active instantly once policies set
So the setup is that we have a bunch of laptops for staff which connect to Windows Server (2012) AD. We have an AD group (I didn't set it up so not 100% sure of policies set) that allows Bitlocker ...
0
votes
1answer
256 views
Lock removable drives to domain/network with BitLocker
I have a network/domain of PCs that users use and don't have administrative privileges. Occasionally, they copy some data to USB drives to move between machines.
I need to prevent data written to ...
1
vote
1answer
38 views
How to protect data on Windows Server
I'm renting an unmanaged dedicated (physical) server, running Windows Server (currently 2012 R2, but it can be changed to another version of the Standard edition). I have a custom Windows service ...
0
votes
0answers
1k views
Syncml(500): The recipient encountered an unexpected condition which prevented it from fulfilling the request - Intune Bitlocker
When trying to enable encryption (BitLocker) from Intune using a profile under Windows10_EndpointProtection
, it throws out an error like this:
Syncml(500): The recipient encountered an unexpected ...
0
votes
0answers
61 views
Azure AD Join Bulk Enrollment - how to enable BitLocker on Windows 10 (1809)
I've used Windows Configuration Designer to create a package for machine enrollment to Azure AD (join). When the package is applied, a machine gets joined to Azure AD. One thing is missing is ...
1
vote
1answer
222 views
Certificate expiration does not match validity period in template (Windows CA)
I'm trying to request a new Bitlocker DRA certificate from my internal CA. The template is set to two years, as shown here Template
I'm trying to request a new certificate via the Certificates MMC ...
0
votes
0answers
47 views
Bitlocked VHDX and VM import
I have a Windows VM with two drives: OS(C) and DATA(D).
The DATA drive is encrypted with bitlocker.
Upon restarting the VM, Windows would ask me to "unlock the DATA drive" prompting for the key.
I ...
1
vote
2answers
2k views
BitLocker with TPM: how to replace the numerical password recovery key protector with an alphanumeric password recovery key protector?
C:\Windows\system32>manage-bde -status
BitLocker Drive Encryption: Configuration Tool version 10.0.17763
Copyright (C) 2013 Microsoft Corporation. All rights reserved.
Disk volumes that can be ...
2
votes
1answer
636 views
Enable-Bitlocker -TpmProtector via GPO does not work (0x80070522)
I am trying to automate the bitlocker in our corporate environment.
I have written a script which enables the bitlocker and it works fine if I run it manually, but whenever I implement it via GPO (...
2
votes
1answer
81 views
Is my plan for Bitlocker deployment missing anything?
1.) Confirm that TPM is activated in the BIOS of all workstations.
- All of these workstations are using Windows 10 Pro, which I believe automatically activates the TPM chip when the OS is installed ...
1
vote
2answers
37 views
bitlocked VHDX security
I have a physical server deployed to a third party.
On said server, runs a Windows 2016 Hyper-V VM.
The VM's VHDX is encrypted with Bitlocker.
The third party has admin access to the physical server, ...
0
votes
1answer
60 views
Bitlocker: Same recovery key across several devices
Background
I work for a company that leases medical testing devices to health clinics. These devices are not domain joined and are only accessible through our MDM solution. These devices connect to a ...
1
vote
0answers
257 views
BitLocker drive encryption - Hyper-V host to guest pass-thru
Cheers folks. I have a question RE Hyper-V guest operating system accessing a physical hard drive from the host, and using BitLocker drive encryption.
Currently, I have a linux VM that has a bunch of ...
0
votes
0answers
553 views
Bitlocker not accepting pin but goes through after tapping enter a few times
This is one of the strangest errors I've run into.
We've recently gotten a batch of Lenovo Legions Y7000 1060's and they work great apart from one of them which doesn't accept its bitlocker pin, ...
3
votes
1answer
184 views
Wiping Bitlocker Drive Key Sector
I have a 4TB drive that has been bitlocker encrypted (via password) since day one and want to wipe it before I sell it used. The process looks like it's going to take 100+ hours via nwipe but I was ...
2
votes
2answers
943 views
Bitlocker - “Recovery information was successfully backed up to Active Directory”, but not really?
I have a device that needs to have its' bitlocker recovery backup up to AD for visibility in the "Bitlocker Recovery" tab of the object in Active Directory.
I found that the device only had a TPM ...
2
votes
1answer
751 views
Windows encrypted software raid
Is it possible to have (preferrably with Windows-on-board tools of Windows Server 2012 R2 and Windows Server 2016) to have a software raid mirror on 2 encrypted disks? (Locally preferred.)
From what ...
27
votes
1answer
10k views
How do you check if a hard drive was encrypted with software or hardware when using BitLocker?
Due to the recent security findings in that probably most SSDs implement encryption in a completely naive and broken way, I want to check which of my BitLocker machines are using hardware encryption ...
2
votes
0answers
2k views
Cannot save BitLocker keys to ADDS for certain machines
We have several Windows 10 laptops (Win10 Enterprise, most running Build 1803, here in our main office and in multiple co-locations. We are implementing BitLocker company-wide and we have a GPO that ...
0
votes
1answer
71 views
After I enabled Bitlocker for the system drive the restart takes hours - and now?
In a Intel server from 2013 with Windows Server 2012 I installed a TPM Module last week. After that I enabled Bitlocker for one 2TB drive. It took many hours but at that time the rest of the server ...
-1
votes
1answer
811 views
Enable BitLocker with PowerShell on Windows Server 2016
I have been fighting with this, previously I believe I was able to set it up using the GUI in File Explorer like you would on a Windows 10 machine. However after installing the BitLocker feature and ...
0
votes
1answer
3k views
Script to enable bitlocker in All Drive
I am trying to enable bitlocker in all domain joined user machines in my office.
I have used a Widows task scheduler script to enable bitlocker in all machines.
But the below code is enabling ...
0
votes
0answers
226 views
deploy silent mbam client install
I have a server with mbamserver installed and configured as needed with the group policy's and sql and stuff.
but now i want to roll it out to the clients in my network. i can install the mbamclient....
0
votes
0answers
19 views
Bitlocker hide menu
I configure a policy to save bitlocker key into AD DS which is working fine but I would like to remove this menu which show when you try to bitlocker the PC.
I dont want to save key on USB, Network ...
0
votes
1answer
89 views
Does BitLocker encrypt in-place?
I can't find explicit documentation on this anywhere: Is BitLocker doing an in-place encryption?
As to, I can actually encrypt my whole running system, with the Windows partition itself, without ...
2
votes
0answers
382 views
Checking which PCR triggered for BitLocker recovery
We have an MBAM server and tested policies which work normally for nearly every machine we've migrated. Though, I have seen 3 systems now that prompt for a recovery key instead of the users PIN. ...
4
votes
1answer
773 views
How to securely encrypt Hyper-V VMs in Failover Cluster
Having TPM 1.2 installed on 2x Dell x730, what options to encrypt user and network data in Failover Cluster?
I see Windows Server 2016 allows to passthrough the TPM to the VM. https://charbelnemnom....
0
votes
0answers
698 views
Is it possible for multiple users to mount a virtual hard drive?
We have a Windows Server 2012 R2 Essentials server and several Windows 10 Pro PCs. We have a drive on the server with all our company documents on which is shared over the network and mapped to all ...
1
vote
1answer
581 views
Bitlocker not auto-unlocking C: drive on server 2008 R2
Here's the scenario. We'got a Dell PE T110 (I know, I know), that we've enabled Bitlocker via TPM. On reboots, it asks to re-enter the bitlocker key, and we have no idea why it's not auto-unlocking. ...
1
vote
0answers
324 views
Bitlocker on Hyper-V server
I have installed Hyper-V server on my new machine and then I added the Bitlocker function and initialized TPM. Now, I am trying to enable Bitlocker on the HDD.
I need:
encryption key saved on TPM
...
0
votes
1answer
709 views
Can I use manage-bde as a different domain user?
I use "manage-bde" in Powershell to remotely check the status of Bitlocker encryption on domain computers.
We have several connected domains, but for this lets say Domain1 and Domain2.
When I try to ...
1
vote
0answers
1k views
Bitlocker AD Key Protector problems
We use Bitlocker Active Directory Key Protector to protect and auto unlock USB drives but are seeing random failures to unlock.
We have two AD Groups that we use
DOMAIN\BitlockerAdmin (contains ...
0
votes
1answer
567 views
Bitlocker Network Unlock Cert
I am trying to setup Bitlocker Network Unlock in our domain and I have ran into a issue I can not seem to pass.
Little background. WINDOWS 2012 R2 WDS server, 2012 R2/2012 domain controllers (forest ...
7
votes
3answers
2k views
Is it possible to stop computers which aren't Bitlocker encrypted logging in?
Is it possible to somehow (startup script?) stop any unencrypted computers from being able to connect to the domain?
Environment:
Windows Active directory, 1000-ish computers, mostly bitlocker ...
0
votes
1answer
101 views
Implications of turning on bitlocker on a server
I have a server which contains some sensitive data and I feel like I should have bitlocker enabled on it. The problem is that the server has many floating licenses installed on it which the PCs on the ...
0
votes
1answer
164 views
Azure IAAS BEK KEK Bitlocker issue
I have an IAAS Disk Encryption question. I have successfully encrypted my machines using Bitlocker/BEK/Azure Key Vault. I'm trying to add the KEK layer on top so that I can run Azure Backup on the ...
1
vote
0answers
364 views
BitLocker with Auto-Unlock / SQL Server Services manually
I have a Window Server 2012 R2 Server (vmware) with a SQL Server Database running on it. For security purposes we installed BitLocker on it. The objective was to encrypt our “data at rest”. The ...
0
votes
1answer
1k views
Does disk encryption on a hyper-v partition work and is it effective and stable?
I have a new health care IT customer requirement. They're file server is a virtual 2012 R2 running on a Dell PE with 2012 R2 Hyper-V. The Dell PE with 2012 R2 Hyper-V server has two partitions. 1st ...
0
votes
1answer
46 views
User data recovery, Bitlocker not letting OS boot.
A user on our network recently could not boot into
their Windows 7 Enterprise laptop.
We have the BitLocker Key, and even after entering it
The installation will not get past the Windows logo.
It ...
3
votes
2answers
687 views
Protect mounted Bitlocker drive from other users
I have a Windows Server 2012 machine where I have created a VHD disk that is stored on my Desktop. That disk is encrypted by Bitlocker. However when I mount the disk and enter the encryption password, ...
1
vote
1answer
3k views
Double Bitlocker Recovery Tab in Active Directory
I've strange issue with double bitlocker tab having exactly same look. Any idea how I can remove one?
0
votes
2answers
2k views
Bitlocker Network Unlock certificate issue
I'm trying to enable Bitlocker Network Unlock feature. I followed this article:
https://technet.microsoft.com/en-us/library/jj574173(v=ws.11).aspx
My environment is:
Domain Functional Level: 2012
...
0
votes
1answer
449 views
Accidentally cleared TPM on BitLocked computer
One of my technicians was supposed to image a computer that has BitLocker enabled. He didn't know the access pin and instead inserted a Dell boot disk to do a soft-restore (keeping all of the clients ...
