BitLocker to Go requires elevation on W2K8R2
Yes, both policies are in place.
November 15th, 2011 1:40pm
We have successfully used BitLocker To Go on Windows 7, where regular, non-privileged users were able to turn BitLocker on and off on their removable storage.
Now, in Windows Server 2008 R2 (domain attached, no Bitlocker-GPO configured) we see an UAC-icon against a removable drive in BitLocker Control-Panel (see screenshot) and regular users are prompted to provide admin-credentials if they want to manage encryption
of that volume.
What are we missing here?
Thank you in advance!
Free Windows Admin Tool Kit Click here and download it now
December 25th, 2011 8:42am
We have successfully used BitLocker To Go on Windows 7, where regular, non-privileged users were able to turn BitLocker on and off on their removable storage.
Now, in Windows Server 2008 R2 (domain attached, no Bitlocker-GPO configured) we see an UAC-icon against a removable drive in BitLocker Control-Panel (see screenshot) and regular users are prompted to provide admin-credentials if they want to manage encryption
of that volume.
What are we missing here?
Thank you in advance!
check with gpresult /r if that policy is applay to computer
December 25th, 2011 1:50pm
Which policy would that be?
On Win7 there was no particular policy applied.
The only two polices we tried (the are applied now) are: "Allow users to apply BitLocker protection on removable data drives" and "Allow users to suspend and decrypt BitLocker protection on removable data drives", but it made no difference.
Free Windows Admin Tool Kit Click here and download it now
December 25th, 2011 2:10pm
hi romkuss
if you want use bitlocker to go without asking administrator credentials, you should disable the polices for removeable storage device.
If you want to use bitlocker to force on bitlocker to go removable storage devices, you can enable the "deny write access to removable drives not protected by bitlocker"
December 26th, 2011 1:12am
Really no-one?
Any MS MVP on the subject?
Please...
Free Windows Admin Tool Kit Click here and download it now
December 26th, 2011 4:00am
Really no-one?
Any MS MVP on the subject?
Please...
That's the policy run gpupadate /force
and than gpresult /r and see if "Name" GPO is apply to that computer
December 26th, 2011 5:28am
Yes, both policies are in place.
Free Windows Admin Tool Kit Click here and download it now
December 26th, 2011 5:43am