TPMAndPIN assigned to laptop or user
Hi All, WE are looking at implementing Bitlocker TPM+PIN on our laptops. When you assign the PIN to a bitlockered laptop, is this PIN assigned to the laptop and not the user? - If someone else turned on the laptop they would have to the know the PIN of that laptop in order to use it, it can't be tied into their AD account for example? thanks
May 20th, 2011 5:13pm

good luck with your implementation. To answer your question, yes the Startup PIN is for the laptop machine and not for the user..whenever anyone turns on the machine it would ask for the startup PIN This is suitable for laptops and not desktops since laptops are mostly used by 1 person while most desktops are shared by many. Thanks
Free Windows Admin Tool Kit Click here and download it now
May 21st, 2011 3:18am

PIN ia bitlocker protectora and is attached to computer object and not a user. In Win7, we can have only one PIN per computer. MS recommendation is to use TPM + PIN for laptop users and for desktop you can use TPM only. Manoj Sehgal
May 25th, 2011 12:59am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics