Solved

BitLocker Password Recovery for Active Directory Users and Computer on Server 2003

Posted on 2010-11-17
2
1,285 Views
Last Modified: 2012-05-10
I'm in the process of getting BitLocker up and running for soon-to-deploy laptops.

The AD schema has been extended and I have confirmed that BitLocker and TPM schema objects are in place.

Group Policy has been enabled to allow backup of BitLocker and TPM recovery information.

A Win7 machine has been encrypted, and recovery passwords have been generated.

The problem (as I understand it) is that I am unable to find a download for Server 2003 of the "BitLocker Recovery Password Viewer for Active Directory Users and Computers Tool".  As a result, the tabs that ought to appear within ADUC are not there...
(The BitLocker tabs are missing both on the DC, and when using the remote admin tools on a Win7 machine).

The equivalent Password Recovery Viewer for Vista and newer systems can be found here:
http://www.microsoft.com/downloads/en/details.aspx?familyid=2786FDE9-5986-4ED6-8FE4-F88E2492A5BD&displaylang=en.  It seems to me I need a Win2K3 equivalent.

Is it not possible to do BitLocker Password Recovery with only Server 2003 domain controllers?  It seems odd that 2003 would be able to support everything else except this final part of the equation.

Thanks

0
Comment
Question by:bllarson
2 Comments
 
LVL 31

Accepted Solution

by:
Justin Owens earned 500 total points
ID: 34164549
You can download the XP/Server 2003 version if you have a Premier MS Account.  You can also contact MS Support from that machine and request it. It should be free. OR, if you want to trust something posted by another Author here, check out this question:

http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/2003_Server/Q_23453950.html

Download the LOG file and change it to an EXE.    If you have a Premier account, you can use this link:

https://premier.microsoft.com/downloads/en-us/bitlocker%20recover%20password%20viewer.zip

Justin
0
 

Author Closing Comment

by:bllarson
ID: 34168652
Strange that MS should make that one so difficult to find and implement. Thanks!
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This script can help you clean up your user profile database by comparing profiles to Active Directory users in a particular OU, and removing the profiles that don't match.
This article outlines the process to identify and resolve account lockout in an Active Directory environment.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question