Bitlocker - Some settings are managed by your system administrator?
I am using Windows 7 Ultimate on a Lenovo X200 tablet. I am connected to a Windows Server 2008 domain. After installing bitlocker, the only option I have under manage is to Save or Print Recovery key. Then there is a remark at the bottom of the screen that "Some settings are managed by your system administrator". I am the system administrator, and I have no Group Policy's set for controlling Bitlocker. How can I turn off the "Some settings are managed by your system administrator" so that I can fully manage bitlocker myself on this machine?-- David Hankins
October 20th, 2010 2:41pm

Hi, Thanks for posting in Microsoft TechNet forums. Due to the situation you described, I would like to recommend you check the group policy settings. Run CMD as administrator, input gpresult /h gpreport.html Then check the group policy results, find the reports related to the BitLocker, make sure the settings are “Enable”. Please feel free to give me any update. Best Regards, Miya Yao TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.com This posting is provided "AS IS" with no warranties, and confers no rights. | Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
October 21st, 2010 1:19am

Miya, I ran the report and pulled up the HTML file and did a search for Bitlocker and there were no matches found. I went through that entire sheet twice and I still don't see any group policy settings for Bitlocker. I am the domain administrator so if you need to me to check anything on the server I can do that as well. David-- David Hankins
October 21st, 2010 8:05am

Hi David, Given that no clear clue, I suggest you manually check the group policy settings. You can refer to : What Group Policy settings are used with BitLocker. Best Regards, Miya Yao TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.comThis posting is provided "AS IS" with no warranties, and confers no rights. | Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
October 22nd, 2010 5:10am

Hi, Did you resolve the problem? Please feel free to give me any update. Best Regards, Miya Yao TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.comThis posting is provided "AS IS" with no warranties, and confers no rights. | Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
October 26th, 2010 3:51pm

Miya, I am still going through all the Group Policy settings. I have not found any Group Policy settings that are "configured" or "enabled", or "disabled". It seems like everything is "not configured". Would this have something to do with settings in Active Directory? David-- David Hankins
Free Windows Admin Tool Kit Click here and download it now
October 26th, 2010 4:17pm

Hello David, We have seen a handful of machines where the BIOS is not populating the Type 16 and 17 SMBIOS tables correctly. Do we have the latest BIOS on the machine. If you can please share a version number. Also can you run a query against the root\cimv2 namespace by running wbemtest, connect to root\cimv2, query 'select * from win32_physicalmemory', apply, and for each instance returned, double-click it, click, show mof and return back the results. Using this we can validate what is being populated through SMBIOS to WMI. Sumesh P - Microsoft Online Community Support
October 27th, 2010 11:17am

Hello David, I must apologize as my reply wasnt intended for this thread, it got mixed up, my bad. For your issue with Bitlocker, i have confirmed with a fresh machine not joined to any domain and it still shows the same message. I am in the process of confirming from the product teams if that is by design or if there are some additional options that are supposed to show. Were you expecting to see any other options or see any functionalty missing? or is it just that you are curious about the error? I will be editing the previous reply as it was in error and to avoid confusion. Sumesh P - Microsoft Online Community Support
Free Windows Admin Tool Kit Click here and download it now
October 27th, 2010 12:56pm

Thanks, I was wondering what my memory information Had to do with Bitlocker. :) As for what I was expecting: I thought there was a way to set a preboot authentication password within Bitlocker. I have read about it on the technet forums and elsewhere but was unable to find where to set the preboot authentication option. That was when I ran into the error and thought maybe that was where I would have had that ability to set the password. Thanks for your assistance! David-- David Hankins
October 27th, 2010 1:01pm

Hello David, Please refer to the following article and see if that is the option you were looking for: Scenario 6: Specifying How to Unlock BitLocker-Protected Operating System Drives (Windows 7) http://technet.microsoft.com/en-us/library/ee424319(WS.10).aspx You may also be interested in knowing the difference between PIN/starup key etc What is the difference between a TPM owner password, recovery password, recovery key, PIN, enhanced PIN, and startup key? http://technet.microsoft.com/en-us/library/ee449438(WS.10).aspx#BKMK_Key Let me know if these answer your question. Sumesh P - Microsoft Online Community Support
Free Windows Admin Tool Kit Click here and download it now
October 27th, 2010 1:23pm

The second link answered all of my questions and more about Bitlocker, but your first response answered the question here so I tagged that as the appropriate answer. Thank you very much for your assistance in troubleshooting this.-- David Hankins
October 27th, 2010 2:17pm

It was a pleasure assisting you and thank you for confirming the solution. Sumesh P - Microsoft Online Community Support
Free Windows Admin Tool Kit Click here and download it now
October 27th, 2010 2:21pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics