If you check the option, BitLocker will not start drive encryption until the computer saves a new recovery key in AD (if you are a mobile user, you will have to wait for the next connection to the domain network) Note that it is recommended to check Do not enable BitLocker until recovery information is stored to AD DS for operating system drives. Then go to Computer Configuration -> Policies -> Administrative Templates -> Windows Components -> BitLocker Drive Encryption -> Operating System Drives and enable the policy Choose how BitLocker-protected operating system drives can be recovered.Enable the Store BitLocker recovery information in Active Directory Domain Services policy with the following settings: Require BitLocker backup to AD DS and Select BitLocker recovery information to store: Recovery passwords and key packages.Go to Computer Configuration -> Administrative Templates -> Windows Components -> BitLocker Drive Encryption.Open the Domain Group Policy Management console ( gpmc.msc), create a new GPO and link it to an OU with the computers you want to enable automatic BitLocker key saving in AD.To automatically save (backup) BitLocker recovery keys to the Active Directory domain, you need to configure a special GPO.
#Windows 10 bitlocker recovery how to#
How to Configure Group Policy to Store BitLocker Recovery Keys in AD?
0 kommentar(er)
