Home
Join

3 Replies

  • There are ways in GPO to turn on encryption, and let AD take care of and keep the key. You will still need to put in a decryption code to log in, but this way if it ever gets locked, AD will have the decryption code. Took a few reboots and time for it to finally start encrypting. 
    Was this post helpful? thumb_up thumb_down
  • From https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-device-...

    "If the user uses a domain account to sign in, the clear key is not removed until the user joins the device to a domain and the recovery key is successfully backed up to Active Directory Domain Services (AD DS). You must enable the Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives Group Policy setting, and select the Do not enable BitLocker until recovery information is stored in AD DS for operating system drives option. With this configuration, the recovery password is created automatically when the computer joins the domain, and then the recovery key is backed up to AD DS, the TPM protector is created, and the clear key is removed."

    BTW, Windows 10 build 17134 has reached the end of it's servicing life. You should upgrade to a newer build

    https://docs.microsoft.com/en-us/windows/release-health/release-information

    Spice (1) flagReport
    1 found this helpful thumb_up thumb_down
  • Thank you much.   I'll digest this and  burrow in...

    Was this post helpful? thumb_up thumb_down

Read these next...

  • Snap! IOS XR vuln, Linux 5.18, ransomware, Starliner docks, & lunar datacenters?

    Snap! IOS XR vuln, Linux 5.18, ransomware, Starliner docks, & lunar datacenters?

    Spiceworks Originals

    Your daily dose of tech news, in brief. Welcome to Monday, everyone! It is also World Turtle Day. At first, I thought it was a day for the Great A'Tuin, a World Turtle from the Discworld series, but we have a few days until the Glorious 25th of May...

  • Spark! Pro series – 23rd May 2022

    Spark! Pro series – 23rd May 2022

    Spiceworks Originals

    Happy Monday!  Welcome to the Monday Spark!  Grab a cup of Coffee and read on! To start things off… A Monday Quotes Top 10. 1. Monday should be optional. 2. Good morning. Keep calm and pretend it’s not Monda...

  • Need help preparing company computers for sale (intune)

    Need help preparing company computers for sale (intune)

    Windows

    Hi Folks,              The Company I work for has just sold off its sales operation. As part of the sale, several laptop & desktop computers that were used in the sales department will be taken to the new companyMy Director has asked me to effectively pre...

  • IP Camera Monitoring System REQUIREMENT

    IP Camera Monitoring System REQUIREMENT

    Hardware

    Hello,I have:1- 150 HIKVISION IP camera 4MP 2- 5*32-CH HIKVISION NVR I want to display a live view of the 150 camera on a video wall.What is the additional required devices should I have?I think I just need a video wall controller and a high performance p...

  • What do you geek out about?

    What do you geek out about?

    Spiceworks

    In honor of Geek Pride day on May 25th, we want to know about your unique hobbies and interests and all the things you could spend hours talking about.Are you a huge comic book fan?  Do you love creating megastructures out of LEGO bricks?  Are you int...