I setup Bitlocker in my lab and live domain serveral months ago and had everything working to store Bitlocker information to AD with no problems. Today I tried to configure another laptop and got an error on the bitlocker wizard on the creating new system drive step. After thinking about my configuration I went back to my test domain and removed the "Deny write acces to fixed drives not protected by bitlocker." Once I removed this setting I was able to complete the wizard and encrypt the drives again. This worked fine when I first set things up?!?!?!Nothing has changed in the live or test domain, with the exception of our montly patching routine. I am assuming a patch broke the ability for this to work the way it did in the past. Has anyone else seen this issue?