Enable Bitlocker on a fixed drive with my user profiles on it.
Here is my situation.
I am creating two partitions on my disk. An OS and a Data. I want my users profiles to be on the "Data" partition. I am changing the registry key
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\ProfilesDirectory to "D:\Users" where D: is my Data partition. This is all working fine; however, I want to enable
Bitlocker on the Data partition but not the OS partition. In the test runs that I have done, after I enable bitlocker on the Data partition the user can no longer log in successfully because the profile can no longer be accessed.
Is there any way I can make this work?
Thank You, SSG Keith Ellsworth
May 27th, 2011 3:31pm
Hi,
As far as I know, when enabling Bitlocker, you need to log in and unlock the encrypted drive. Therefore, it seems there is no method to login if you encrypt the drive
which contains user profile.
Best Regards,
Niki
Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
June 1st, 2011 5:24am
OK so my next solution would be to have a batch file with the following:
manage-bde -unlock D: -pw
and have this run before a user logs on.
I put this in the startup script of the Local Group Policy under Computer Configuration\Windows Settings\Scripts.
Now I'm running in to the problem of this script not running. Can I use a batch file here? Why is it not running?Thank You, SSG Keith Ellsworth
June 7th, 2011 10:33am
Hi,
The correct command of
manage-bde unlock is:
manage-bde -unlock D: -RecoveryPassword
440264-574992-520740-053020-015653-373956-717970-466180
Change 440264-574992-520740-053020-015653-373956-717970-466180
to your own BitLocker Recovery Key.
For more information about
Manage-bde: unlock
http://technet.microsoft.com/en-us/library/ff829854(WS.10).aspx
Best Regards,
Niki
Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
June 9th, 2011 10:03pm