No Bitlocker option on Data Drive
I was able to encrypt the OS drive without a problem, but there is no option to encrypt the other hard disk on the Windows 2008 R2 server. What do I have to turn on?
February 2nd, 2011 7:54pm

Hi, If you can encrypt the OS drive, so you should have enabled Bitlocker. Then I would like to ask you the type of “other hard disk” on the Windows Server 2008 R2 server, is that a local disk or a LUN attached from a storage device such as SAN? Best Regards, Vincent Hu
Free Windows Admin Tool Kit Click here and download it now
February 3rd, 2011 2:29am

Also... you are not trying to bitlocker a clustered or shared volume are you?
February 3rd, 2011 4:00am

It is a normal local hard disk set as a separate partition.
Free Windows Admin Tool Kit Click here and download it now
February 3rd, 2011 1:46pm

Hello, Check the Scenario 4 documentation on technet. Turn on BitLocker Drive Encryption for server data volumes. Thanks
February 3rd, 2011 3:28pm

Thanks for the article, but what commands would I use for another hard disk? That instructions assume only one physical hard disk.
Free Windows Admin Tool Kit Click here and download it now
February 3rd, 2011 4:36pm

Run from elevated administrator cmd. manage-bde –on <Drive Letter to Encrypt>: -RecoveryPassword –StartupKey <Drive Letter to Encryption Key Volume >: Example: manage-bde –on D: -rp –sk F: Be sure that the that the encryption Key volume Letter is correct and will always be there when the machine is mounted. Locking removable data drive. The syntax of this command is: manage-bde <driveletter> -lock Outside of using this command, data drives will be locked on shutdown and restart of the operating system. A removable data drive will also be locked automatically when the drive is removed from the computer. Note: Ensure all data is saved to the drive before locking it. Once locked, the drive will become inaccessible. For more Info. Thanks
February 4th, 2011 3:07am

I've run that exact command and I keep getting an error. code 0x80070057: The parameter is incorrect. When I run manage-bde -status the data drive is not present.
Free Windows Admin Tool Kit Click here and download it now
February 4th, 2011 6:46pm

Parameter is incorrect you are not passing paramters to the command. Check the syntax below. Syntax: Manage-bde –status <Drive_Letter> where <Drive_Letter> is the drive letter of the disk where BitLocker was enabled (without the brackets <>). For example, run the command: Manage-bde –status d: Thanks
February 5th, 2011 2:08am

Hey, I just had this problem recently too. It was on a client computer but the issue may be the same. Check out this related thread http://social.technet.microsoft.com/Forums/en-US/w8itprosecurity/thread/40e95c35-8232-46ba-a6b6-618020a5525c/ You can check if your data partition is a system partition in disk management
Free Windows Admin Tool Kit Click here and download it now
September 21st, 2012 8:29am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics