BitLocker to Go requires elevation on W2K8R2
Yes, both policies are in place.
November 15th, 2011 1:40pm

We have successfully used BitLocker To Go on Windows 7, where regular, non-privileged users were able to turn BitLocker on and off on their removable storage. Now, in Windows Server 2008 R2 (domain attached, no Bitlocker-GPO configured) we see an UAC-icon against a removable drive in BitLocker Control-Panel (see screenshot) and regular users are prompted to provide admin-credentials if they want to manage encryption of that volume. What are we missing here? Thank you in advance!
Free Windows Admin Tool Kit Click here and download it now
December 25th, 2011 8:42am

We have successfully used BitLocker To Go on Windows 7, where regular, non-privileged users were able to turn BitLocker on and off on their removable storage. Now, in Windows Server 2008 R2 (domain attached, no Bitlocker-GPO configured) we see an UAC-icon against a removable drive in BitLocker Control-Panel (see screenshot) and regular users are prompted to provide admin-credentials if they want to manage encryption of that volume. What are we missing here? Thank you in advance! check with gpresult /r if that policy is applay to computer
December 25th, 2011 1:50pm

Which policy would that be? On Win7 there was no particular policy applied. The only two polices we tried (the are applied now) are: "Allow users to apply BitLocker protection on removable data drives" and "Allow users to suspend and decrypt BitLocker protection on removable data drives", but it made no difference.
Free Windows Admin Tool Kit Click here and download it now
December 25th, 2011 2:10pm

hi romkuss if you want use bitlocker to go without asking administrator credentials, you should disable the polices for removeable storage device. If you want to use bitlocker to force on bitlocker to go removable storage devices, you can enable the "deny write access to removable drives not protected by bitlocker"
December 26th, 2011 1:12am

Really no-one? Any MS MVP on the subject? Please...
Free Windows Admin Tool Kit Click here and download it now
December 26th, 2011 4:00am

Really no-one? Any MS MVP on the subject? Please... That's the policy run gpupadate /force and than gpresult /r and see if "Name" GPO is apply to that computer
December 26th, 2011 5:28am

Yes, both policies are in place.
Free Windows Admin Tool Kit Click here and download it now
December 26th, 2011 5:43am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics