Questions tagged [bitlocker]

Microsoft Windows technology for full disk(volume) encryption.

Filter by
Sorted by
Tagged with
-2 votes
1 answer
51 views

Solution to remotely unlock bitlocker on domain [closed]

I'm looking for a solution to remotely (on site, connected to our domain) unlock bitlocker on laptops. After a few research, I found that this is quite possible with BitLocker Network Unlock, but what ...
user avatar
  • 1
0 votes
1 answer
103 views

Bitlocker Encryption on RAID 0 kicks drive out of array half-way through

After hunting around for answers, I found some for the question: "Does Bitlocker support RAID on Windows". The answer seems to be that hardware RAID is supported. I've got a RAID 0 drive ...
user avatar
  • 103
0 votes
1 answer
97 views

Hyper-V, BitLocker usage both on the virtualized system and the drive of the host system

Using Hyper-V on a Windows 10 Pro computer, all Hyper-V VM related data is stored on a non-system secondary SSD: D:\. I know that you can use BitLocker in the VMs themselves, by enabling TPM support ...
user avatar
0 votes
2 answers
242 views

Using InTune for BitLocker enabling TPM+PIN+USB

I am tasked with enabling BitLocker via InTune and I am struggling to understand why the following settings are not taking effect on the endpoint. In the OS drive settings Compatible TPM Startup - ...
user avatar
0 votes
1 answer
177 views

Can we prevent Windows from marking NVMe drives as removable?

I've noticed recently that when adding NVMe drives to Windows, it has a tendency to mark them as removable. I think this is more likely on "enterprise" NVMe SSDs, at least in my experience. ...
user avatar
0 votes
1 answer
415 views

How do I disable Bitlocker Encryption settings using Intune?

We've activated Intune Bitlocker encryption and configured it needs a password to unlock. Since we don't want our users to change the Bitlocker pin, we want to disable the Settings below. Bitlocker ...
user avatar
  • 13
0 votes
1 answer
109 views

Bitlocker Auto-Unlock C drive with TPM

I wanted to enable auto-unlock on C drive with TPM. When I click on enable bitlocker on C Drive, it shows me only 2 options Insert a USB drive Enter a password I do not see any option which says ...
user avatar
0 votes
1 answer
238 views

Bitlocker Recovery Keys not showing in active directory suite

I recently asked this same question here about a month ago -> BitLocker Recovery Keys Not Showing in Active Directory But things have changed now and I am still getting the same results. I am going ...
user avatar
  • 3
0 votes
2 answers
1k views

BitLocker Recovery Keys Not Showing in Active Directory

I have been working on this all last week and this week and have made no progress. I am working in active directory and group policy and need to store the bitlocker recovery keys in the bitlocker tab. ...
user avatar
  • 3
0 votes
1 answer
92 views

Bitlocker GPO automatic?

I was wondering if someone else has accomplished on what im trying to do i have GPO to automatic stores the keys in the AD when activated the bitlocker, but it seems that i have to do it manually, so ...
user avatar
0 votes
1 answer
277 views

What powershell module to import in order to run "Read-ADRecoveryInformation"?

I tried to run Read-ADRecoveryInformation but hit with this infamous error message. I tried the following cmdlets to look for the module but I could not find it. Get-command -Module ...
user avatar
0 votes
1 answer
297 views

win10 bitlocker enrypts partition after update

one of my clients has an laptop with Win 10. After the client run the latest Updates apparently BitLocker started to encrypt the files/Partition WITHOUT CONSENT and WITHOUT PROVIDING ANY RECOVERY KEYS....
user avatar
-4 votes
1 answer
359 views

How to add credentials to bitlocker script

I'm trying to create a script to see if the bitlocker works or not. If it works, then a file is posted in the c:\ folder We will call "yes" if the bitlocker does not work then add password ...
user avatar
  • 1
4 votes
1 answer
661 views

BitLocker on Hyper-V Server 2019 - Failed - The system cannot find the file specified

To start with, I want to be clear that this is on "Hyper-V Server 2019" (free headless hypervisor) and not "Windows Server 2019" with the Hyper-V role installed. I've been banging ...
user avatar
  • 303
-1 votes
1 answer
792 views

Bitlocker drive encryption after PC rename or removing from domain

I've the script and gpo for the bit-locker drive encryption and it successfully writing the encryption key to the AD object. Now what I can't find anywhere to test is what will happen in case the PC ...
user avatar
0 votes
1 answer
81 views

When recovering a drive from within Microsoft BitLocker Administration and Monitoring (MBAM), why are you asked for a reason for recovering the drive?

When choosing to decrypt a drive via MBAM, I've noticed a combo box that asks the user to choose a reason for decryption - several possible options are listed including a lost PIN. What's the ...
user avatar
  • 155
0 votes
1 answer
48 views

Mapped Harddrive, Bitlocker? [closed]

All the available letters to use for harddrive, i used up. So for my new harddrive, i used mapping. So i have mapped my new harddrive to a folder. My question is, is it possible to still get ...
user avatar
0 votes
2 answers
67 views

Bitlocker my LAN

I have a Windows Server 2012 R2 LAN that is working great. I recently have been given the task to encrypt the data at rest. I would like to use bitlocker, but all the documentation is for ...
user avatar
0 votes
1 answer
3k views

How to make GPO not apply to certain OU's

I am having issues to make a GPO not apply to a certain OU. I have a bitlocker GPO that uses password on domain level. (so applies to every ou) but I want it to exclude the computer and users that ...
user avatar
0 votes
1 answer
305 views

Lock-Bitlocker after Robocopy - access denied

I'm trying to create a backup script that unlocks an external bitlocker drive, robocopies files to it, then locks it when it's done. I am able to unlock and copy just fine, but the final step of "Lock-...
user avatar
4 votes
0 answers
118 views

Bitlocker - mainboard exchange won't require recovery password - why?

A mainboard died. It was exchanged for the same board type (same bios and config, as well, also a new CPU but of the same type). The hard drive is encrypted with bitlocker (on Win10 Pro v1903) and I ...
user avatar
1 vote
0 answers
52 views

Bitlocker sometimes shows as active instantly once policies set

So the setup is that we have a bunch of laptops for staff which connect to Windows Server (2012) AD. We have an AD group (I didn't set it up so not 100% sure of policies set) that allows Bitlocker ...
user avatar
  • 111
0 votes
1 answer
458 views

Lock removable drives to domain/network with BitLocker

I have a network/domain of PCs that users use and don't have administrative privileges. Occasionally, they copy some data to USB drives to move between machines. I need to prevent data written to ...
user avatar
1 vote
1 answer
42 views

How to protect data on Windows Server

I'm renting an unmanaged dedicated (physical) server, running Windows Server (currently 2012 R2, but it can be changed to another version of the Standard edition). I have a custom Windows service ...
user avatar
  • 111
0 votes
0 answers
3k views

Syncml(500): The recipient encountered an unexpected condition which prevented it from fulfilling the request - Intune Bitlocker

When trying to enable encryption (BitLocker) from Intune using a profile under Windows10_EndpointProtection , it throws out an error like this: Syncml(500): The recipient encountered an unexpected ...
user avatar
2 votes
2 answers
1k views

Certificate expiration does not match validity period in template (Windows CA)

I'm trying to request a new Bitlocker DRA certificate from my internal CA. The template is set to two years, as shown here Template I'm trying to request a new certificate via the Certificates MMC ...
user avatar
0 votes
0 answers
122 views

Bitlocked VHDX and VM import

I have a Windows VM with two drives: OS(C) and DATA(D). The DATA drive is encrypted with bitlocker. Upon restarting the VM, Windows would ask me to "unlock the DATA drive" prompting for the key. I ...
user avatar
  • 189
1 vote
2 answers
5k views

BitLocker with TPM: how to replace the numerical password recovery key protector with an alphanumeric password recovery key protector?

C:\Windows\system32>manage-bde -status BitLocker Drive Encryption: Configuration Tool version 10.0.17763 Copyright (C) 2013 Microsoft Corporation. All rights reserved. Disk volumes that can be ...
user avatar
1 vote
1 answer
2k views

Enable-Bitlocker -TpmProtector via GPO does not work (0x80070522)

I am trying to automate the bitlocker in our corporate environment. I have written a script which enables the bitlocker and it works fine if I run it manually, but whenever I implement it via GPO (...
user avatar
2 votes
1 answer
215 views

Is my plan for Bitlocker deployment missing anything?

1.) Confirm that TPM is activated in the BIOS of all workstations.  - All of these workstations are using Windows 10 Pro, which I believe automatically activates the TPM chip when the OS is installed ...
user avatar
1 vote
2 answers
106 views

bitlocked VHDX security

I have a physical server deployed to a third party. On said server, runs a Windows 2016 Hyper-V VM. The VM's VHDX is encrypted with Bitlocker. The third party has admin access to the physical server, ...
user avatar
  • 189
0 votes
1 answer
492 views

Bitlocker: Same recovery key across several devices

Background I work for a company that leases medical testing devices to health clinics. These devices are not domain joined and are only accessible through our MDM solution. These devices connect to a ...
user avatar
1 vote
0 answers
436 views

BitLocker drive encryption - Hyper-V host to guest pass-thru

Cheers folks. I have a question RE Hyper-V guest operating system accessing a physical hard drive from the host, and using BitLocker drive encryption. Currently, I have a linux VM that has a bunch of ...
user avatar
0 votes
0 answers
1k views

Bitlocker not accepting pin but goes through after tapping enter a few times

This is one of the strangest errors I've run into. We've recently gotten a batch of Lenovo Legions Y7000 1060's and they work great apart from one of them which doesn't accept its bitlocker pin, ...
user avatar
3 votes
1 answer
634 views

Wiping Bitlocker Drive Key Sector

I have a 4TB drive that has been bitlocker encrypted (via password) since day one and want to wipe it before I sell it used. The process looks like it's going to take 100+ hours via nwipe but I was ...
user avatar
  • 165
2 votes
2 answers
1k views

Bitlocker - "Recovery information was successfully backed up to Active Directory", but not really?

I have a device that needs to have its' bitlocker recovery backup up to AD for visibility in the "Bitlocker Recovery" tab of the object in Active Directory. I found that the device only had a TPM ...
user avatar
2 votes
1 answer
2k views

Windows encrypted software raid

Is it possible to have (preferrably with Windows-on-board tools of Windows Server 2012 R2 and Windows Server 2016) to have a software raid mirror on 2 encrypted disks? (Locally preferred.) From what ...
user avatar
30 votes
1 answer
17k views

How do you check if a hard drive was encrypted with software or hardware when using BitLocker?

Due to the recent security findings in that probably most SSDs implement encryption in a completely naive and broken way, I want to check which of my BitLocker machines are using hardware encryption ...
user avatar
  • 7,179
2 votes
0 answers
3k views

Cannot save BitLocker keys to ADDS for certain machines

We have several Windows 10 laptops (Win10 Enterprise, most running Build 1803, here in our main office and in multiple co-locations. We are implementing BitLocker company-wide and we have a GPO that ...
user avatar
0 votes
1 answer
358 views

After I enabled Bitlocker for the system drive the restart takes hours - and now?

In a Intel server from 2013 with Windows Server 2012 I installed a TPM Module last week. After that I enabled Bitlocker for one 2TB drive. It took many hours but at that time the rest of the server ...
user avatar
  • 141
-1 votes
1 answer
1k views

Enable BitLocker with PowerShell on Windows Server 2016

I have been fighting with this, previously I believe I was able to set it up using the GUI in File Explorer like you would on a Windows 10 machine. However after installing the BitLocker feature and ...
user avatar
  • 209
0 votes
1 answer
5k views

Script to enable bitlocker in All Drive

I am trying to enable bitlocker in all domain joined user machines in my office. I have used a Widows task scheduler script to enable bitlocker in all machines. But the below code is enabling ...
user avatar
0 votes
0 answers
309 views

deploy silent mbam client install

I have a server with mbamserver installed and configured as needed with the group policy's and sql and stuff. but now i want to roll it out to the clients in my network. i can install the mbamclient....
user avatar
  • 21
0 votes
0 answers
21 views

Bitlocker hide menu

I configure a policy to save bitlocker key into AD DS which is working fine but I would like to remove this menu which show when you try to bitlocker the PC. I dont want to save key on USB, Network ...
user avatar
  • 5
0 votes
1 answer
143 views

Does BitLocker encrypt in-place?

I can't find explicit documentation on this anywhere: Is BitLocker doing an in-place encryption? As to, I can actually encrypt my whole running system, with the Windows partition itself, without ...
user avatar
  • 1
2 votes
1 answer
500 views

Checking which PCR triggered for BitLocker recovery

We have an MBAM server and tested policies which work normally for nearly every machine we've migrated. Though, I have seen 3 systems now that prompt for a recovery key instead of the users PIN. ...
user avatar
4 votes
1 answer
1k views

How to securely encrypt Hyper-V VMs in Failover Cluster

Having TPM 1.2 installed on 2x Dell x730, what options to encrypt user and network data in Failover Cluster? I see Windows Server 2016 allows to passthrough the TPM to the VM. https://charbelnemnom....
user avatar
  • 266
0 votes
0 answers
1k views

Is it possible for multiple users to mount a virtual hard drive?

We have a Windows Server 2012 R2 Essentials server and several Windows 10 Pro PCs. We have a drive on the server with all our company documents on which is shared over the network and mapped to all ...
user avatar
  • 113
1 vote
1 answer
706 views

Bitlocker not auto-unlocking C: drive on server 2008 R2

Here's the scenario. We'got a Dell PE T110 (I know, I know), that we've enabled Bitlocker via TPM. On reboots, it asks to re-enter the bitlocker key, and we have no idea why it's not auto-unlocking. ...
user avatar
1 vote
0 answers
383 views

Bitlocker on Hyper-V server

I have installed Hyper-V server on my new machine and then I added the Bitlocker function and initialized TPM. Now, I am trying to enable Bitlocker on the HDD. I need: encryption key saved on TPM ...
user avatar
  • 149