BitLocker

ManieyaK_
ManieyaK_ used Ask the Experts™
on
Hello I recently changed some GPO's at domain level, now when a HDD that's encrypted with BitLocker in plugged in we get a message that say's "Group Policy requires that for this drive to be writable, either  auto-unlock must be set or a smart card must be used.  A password alone is not sufficient."  Not sure what policy controls this, also on my DC running server 2016 when i click to unlock drive nothing happens.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Distinguished Expert 2018

Commented:
Go through your GPOs (or let's go through them together). Have a result file ready:
gpresult /h %temp%\result.html & %temp%\result.html

Open in new window

Wiggle My Legs, Owner
Commented:
From this thread's age, OP probably did it with that command from McKnife.  He probably should get credit at this point huh?  :)  Since I was cleaning up email, I thought for others I'd post the spreadsheet of GP info, and show an excel find.  Once the spreadsheet is open, select column H, find with cmd+f, enter "bitlocker", click "Find All", stretch out window and have a look.  Of course I'm not trying to say what is shown in the image is an answer, it is only meant to be an example of quick viewing.  Helpful since when you click in the Find window, it stays on top of the spreadsheet, so you can click and scroll on both.

Screen Grab of Searching GPOs.
The spreadsheet is from
https://www.microsoft.com/en-us/download/details.aspx?id=25250


Some entries look redundant until you check scope or platform or other issues.
Windows10andWindowsServer2016Policy.xlsx
ManieyaK_CSSP

Author

Commented:
Guys thanks for your comments, very helpful.
Distinguished Expert 2018

Commented:
CSSP: you are welcome.
Be aware that you may change the point division at question closure. Just saying, because I offered to help you, you gave no feedback and weeks later took another answer that would match what we would have found much sooner... just to give him about 8x as many points for it. I don't like this gamification and point-awarding idea anyway, but many experts do and you might want to adjust points on your next question.

Have a good day :-)

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial