BitLocker AD Backup
Hello everyone, I know this has been asked before, and I've looked at all the chosen answers and something just isn't right in my installation. I've got a domain mixed with 2003 SP2 and A couple of Windows 2008 R2 domain controllers. The schema entries are in place, I've run the scripts necessary to get TPM information into the AD. I've been able to verify that my computer object in the domain has my TPM password, but when I run the command below, I get the following error. This is a workstation that has had the driver bitlocker'd while connected to the domain, but prior to the enforcement of policy settings to require backup to ad ds. C:\>manage-bde -protectors -adbackup c: -id {E3ABD704-EBDA-4936-BA42-55FDBAADD36C} BitLocker Drive Encryption: Configuration Tool version 6.1.7600 Copyright (C) Microsoft Corporation. All rights reserved. ERROR: Group policy does not permit the storage of recovery information to Active Directory. The operation was not attempted. I have checked in Group Policy, that the REQUIRE BACKUP TO AD DS is checked for both the TPM and BitLocker Recovery keys. I'm positive that the GPO is processing because I've changed a UI setting to hide a particular control panel applet as a verification parameter, and it is hidden. I run GPUPDATE from the command prompt and both Computer and User Policy updates successfully, so I'm not sure what I'm doing wrong. Any suggestions would be great.John Wildes | Senior Enterprise Architect | United Airlines | Desktop Engineering
May 27th, 2010 6:54pm

Hi, after checking the issue, it seems this is a Windows Server related issue. As this forum focuses on Windows 7 specific issues, this inquiry would best be posted to Windows Server forum: http://social.technet.microsoft.com/Forums/en/winserversecurity/threads The reason why we recommend posting appropriately is you will get the most qualified pool of respondents, and other partners who read the forums regularly can either share their knowledge or learn from your interaction with us. Thank you for your understanding.Sean Zhu - MSFT
Free Windows Admin Tool Kit Click here and download it now
May 28th, 2010 4:50am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics