BitLocker

Hello I recently changed some GPO's at domain level, now when a HDD that's encrypted with BitLocker in plugged in we get a message that say's "Group Policy requires that for this drive to be writable, either  auto-unlock must be set or a smart card must be used.  A password alone is not sufficient."  Not sure what policy controls this, also on my DC running server 2016 when i click to unlock drive nothing happens.
ManieyaK_CSSPAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

McKnifeCommented:
Go through your GPOs (or let's go through them together). Have a result file ready:
gpresult /h %temp%\result.html & %temp%\result.html

Open in new window

0
Christopher Jay WolffWiggle My Legs, OwnerCommented:
From this thread's age, OP probably did it with that command from McKnife.  He probably should get credit at this point huh?  :)  Since I was cleaning up email, I thought for others I'd post the spreadsheet of GP info, and show an excel find.  Once the spreadsheet is open, select column H, find with cmd+f, enter "bitlocker", click "Find All", stretch out window and have a look.  Of course I'm not trying to say what is shown in the image is an answer, it is only meant to be an example of quick viewing.  Helpful since when you click in the Find window, it stays on top of the spreadsheet, so you can click and scroll on both.

Screen Grab of Searching GPOs.
The spreadsheet is from
https://www.microsoft.com/en-us/download/details.aspx?id=25250


Some entries look redundant until you check scope or platform or other issues.
Windows10andWindowsServer2016Policy.xlsx
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
ManieyaK_CSSPAuthor Commented:
Guys thanks for your comments, very helpful.
0
McKnifeCommented:
CSSP: you are welcome.
Be aware that you may change the point division at question closure. Just saying, because I offered to help you, you gave no feedback and weeks later took another answer that would match what we would have found much sooner... just to give him about 8x as many points for it. I don't like this gamification and point-awarding idea anyway, but many experts do and you might want to adjust points on your next question.

Have a good day :-)
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Encryption

From novice to tech pro — start learning today.