Vista, Server 2008 and the Case of the Bitlocker Dual Boot

re: Vista, Server 2008 and the Case of the Bitlocker Dual Boot

Keith Combs — Sun, 20 Jul 2008 09:05:11 GMT

You are storing anything in Active Directory?

re: Vista, Server 2008 and the Case of the Bitlocker Dual Boot

richmac — Sun, 20 Jul 2008 12:32:25 GMT

Keith

Yes, actually, I did back up the recovery keys to AD, but didn't mention it so as to make the description a bit simpler. If you enable the following Group Policy setting (locally or in AD), Bitlocker will backup your recovery password to AD:

Computer Configuration > Administrative Templates > Windows Components > Bitlocker Drive Encryption > Turn on Bitlocker backup to Active Directory Domain Services

There is a sub-setting in that policy called "Require BitLocker backup to AD DS", which prevents Bitlocker encrypting anything unless it can back up your keys in this way.

Get loads of information here:

Configuring Active Directory to Back up Windows BitLocker Drive Encryption and Trusted Platform Module Recovery Information

~ Richard

Protecting Removable Drives with Bitlocker

Richard's Weblog — Mon, 06 Oct 2008 12:36:47 GMT

In a recent post , I explained how easy it was to use Bitlocker to secure your drives in a dual-boot

Programming Hyper-V with WMI and C# - Getting Started

Richard's Weblog — Wed, 29 Apr 2009 02:06:32 GMT

You may have seen from a recent post that I received a new laptop that was capable of running Hyper-V.