Set up Windows Server Essentials 2012R2 to require client bitlocker encryption.

Posted on 2014-07-23
Last Modified: 2014-07-25
We have 4 clients (Windows 7 and 8) hooked up to a Windows Server Essentials 2012R2.  The server was set up by someone inexperienced, and I know that it was not set up perfectly.

My question:  I want to set group policies so all the clients have to turn on bitlocker encryption, but I am not sure the right way to do it.
Question by:NinEliAbe
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
LVL 55

Expert Comment

ID: 40216075
Do you have win7 ultimate or enterprise? That's required for bitlocker.
If I were you, I'd encrypt manually with only four devices.

Author Comment

ID: 40217497
I was hoping to centralize the decryption process,  so I wouldn't have to keep track of (and worry about users protecting) decryption codes.  Is it much more complicated to do it through GPO?  Win7 Pro doesn't support bitlocker?
LVL 55

Accepted Solution

McKnife earned 500 total points
ID: 40217573
7 pro doesn't, no. So even less than four to go. I doubt that jt will pay out if you use GPOs then. Shouldn't be done while users could shutdown the system, either, another reason to do it manually.
simply use manage-bde.exe to backup the keys to AD.
Moving data to the cloud? Find out if you’re ready

Before moving to the cloud, it is important to carefully define your db needs, plan for the migration & understand prod. environment. This wp explains how to define what you need from a cloud provider, plan for the migration & what putting a cloud solution into practice entails.


Author Comment

ID: 40218021
Many thanks.  One final question.  Someone who doesn't know a lot set up some machines using bitlocker, and those machines require a bitlocker key whenever they are started, before they get out of the monochrome pre-windows stage of launch.  Is that how it is supposed to be?  I would be happy if one started normally, and the encryption were only an issue if you tried to access the hard drive without logging in to Windows.
LVL 55

Expert Comment

ID: 40218425
You are talking about transparent encryption. That would be possible on machines that have a tpm chip. Those can be setup to use only the TPM for protection and no password or PIN or USB key.

Author Closing Comment

ID: 40220088
Definitive and rapid.  Thanks.

Featured Post

Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In 2017, ransomware will become so virulent and widespread that if you aren’t a victim yourself, you will know someone who is.
The conference as a whole was very interesting, although if one has to make a choice between this one and some others, you may want to check out the others.  This conference is aimed mainly at government agencies.  So it addresses the various compli…
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …
If you're a developer or IT admin, you’re probably tasked with managing multiple websites, servers, applications, and levels of security on a daily basis. While this can be extremely time consuming, it can also be frustrating when systems aren't wor…

626 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question