Thank you my friend. I have never run into this type of dual-boot issue b-4 until now. Your tutorial and screen shots helped out a lot. I'm mid way through my schooling in all kinds of pc repair, maintenance, and programing. I'm pretty good with the average laymen coming to me w/ a simple registry or virus repair, but some things just baffle me still. The CMD promps are my favorite thus far. The most effective and less time consuming.
From a future windows intrusive expert to another...
THNX!!!
nice tutorial. You wrote that you have a dual boot and that this applies equally to W7 and W2008 (esentially Vista). Then you wrote ?2. Use the following command “cscript %systemroot%\system32\manage-bde.wsf –protectors –add %systemdrive% -tpmandpin <4-20 digit numeric PIN>” (without the quotes)." You also wrote that you have a triple boot. This single elevated command line edit adds a PIN to all three partitions? You do not have to do it serperately ie for C, D, and E or each OS parition? Also, if necessary only once, which parition do you choose? C, D. or E?cscript %systemroot%\system32\manage-bde.wsf –protectors –add (which one C,D. or E or all??????) -tpmandpin Thanks!
As a follow on question, in a dual/triple boot, the system drive seems to always be C: no matter wihch OS one is booting into. Are you saying just using the edit you propose will add the PIN to TPM for all OS'? Just reflecting on your tutorial, as it is not obviously clear to an IT gal just out of college. Tamara.
Tamara. It is a while since I originally wrote this and have had to do it, and now I understand after reading it, it can be a bit confusing. Basically you need to run this in each of the OS's installed while booted into that OS. This will enable the PIN feature. So if you had Win2k and Vista you would need to run the manage-bde command in each OS. The %systemdrive% parameter is exactly what you need to use (you don't need t specify a drive letter), it will run the commmand against whatever is the system drive for the currently booted OS.
Also in Windows 7 manage-bde is now an executable and not a script and anyway, managing the TPM and PIN is now possible without the command line tool.
HTH. Carl H
