Enable Bitlocker via script on Data drive
I am trying to enable bitlocker on our laptops which have a C partition (OS) and a D partition (Data)
I have downloaded EnableBitLocker.vbs and managed to enable the system drive encryption using
enablebitlocker.vbs /on:tpm /l:c:\windows\temp\bitlocker.log
The Data partition (D:) does not encrypt using this however. I cannot see a way to specify the drive using this script.
Can anyone advise how I can do this?
Thanks
October 28th, 2010 7:17am
To enable BitLocker by using command line, I recommand to you to have a look to this
Microsoft article .
If this does not help, please post your question in
this forum .
This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Free Windows Admin Tool Kit Click here and download it now
October 28th, 2010 7:38am
Thanks for that!
Quick question - I am being informed that "Only the OS volume may be secured with the TPM"
This would indicate that I can only use TPM on the C: drive. Surely this isn't the case?
Thanks
Aidan
October 28th, 2010 8:04am
Hi Aidan,
Thanks for posting in Microsoft TechNet forums.
"Only the OS volume may be secured with the TPM", I would say this is incorrect. The TPM is used to perform system integrity checks on critical early
boot components. The TMP collects and stores measurements from multiple early boot components and boot configuration data to create a system identifier. for that computer, much like a fingerprint. If the early boot components are changed or tampered with,
such as by changing the BIOS, changing the master boot record (MBR), or moving the hard disk to a different computer, the TPM prevents BitLocker from unlocking the encrypted volume and the computer enters recovery mode.
For more information, please visit: http://technet.microsoft.com/en-us/library/cc766159(WS.10).aspx
Best Regards
Magon Liu
TechNet Subscriber Support
in forum. If you have any feedback on our support, please contact
tngfb@microsoft.comPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
November 1st, 2010 4:15am
Hi,
Thanks for posting in Microsoft TechNet forums.
As this thread has been quiet for a while, we assume that the issue has been resolved. At this time, we will mark
it as ‘Answered’ as the previous steps should be helpful for many similar scenarios. If the issue still persists, please feel free to reply this post directly so we will be notified to follow it up. You can also choose to unmark the answer
as you wish.
BTW, we’d love to hear your feedback about the solution. By sharing your experience you can help other
community members facing similar problems. Thanks for your understanding and efforts.
Best Regards
Magon Liu
TechNet Subscriber Support
in forum. If you have any feedback on our support, please contact
tngfb@microsoft.comPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
November 5th, 2010 5:46am
I couldn't figure this one out so ended up configuring the laptops only to have a C drive.....not ideal!
Free Windows Admin Tool Kit Click here and download it now
November 5th, 2010 10:59am