BitLocker related settings - some appear to be missing
- From: "Bruce Sanderson" <bsanders@xxxxxxxxxxxxx>
- Date: Thu, 20 Aug 2009 13:26:25 -0700
I'm doing some planning and research for a BitLocker with Windows 7 deployment. We have an Active Directory instance (currently Windows 2003 SP2). The scheme extension required has been installed and the ACE to allow computers to backup TPM recovery information in Active Directory (discussed in http://technet.microsoft.com/en-us/library/cc766015(WS.10).aspx) are in place.
In the document "Best Practices for BitLocker in Windows 7" at
https://login.live.com/login.srf?wa=wsignin1.0&rpsnv=11&checkda=1&ct=1250798347&rver=6.0.5276.0&wp=MCLBI&wlcxt=technet%24technet%24technet&wreply=http:%2F%2Ftechnet.microsoft.com%2Fen-us%2Flibrary%2Fdd875532%2528WS.10%2529.aspx&lc=1033&id=254354
there is a section for Group Policy Settings with "Categories" "Operating system drives", "Fixed data drives" and "Removable data drives" and settings such as "Configure minimum PIN length for startup
" (Operating system drives), "Choose how BitLocker-protected fixed drives can be recovered" (Fixed data drives).
I can not find these settings anywhere in GPMC
1. on my Windows 7 RTM installation with RSAT for Windows 7 RTM installed (http://www.microsoft.com/downloads/details.aspx?FamilyID=7d2f6ad7-656b-4313-a005-4e344e43997d&displaylang=en)
, nor
2. on Windows Server 2008 R2 RTM with the Group Policy Management Console feature installed
, nor
3. on Windows Server 2008 R2 RTM with Domain Services installed configured as a Domain Controller in its own forest (test installation)
These settings are also discussed in the webcast available from
http://msevents.microsoft.com/CUI/WebCastEventDetails.aspx?culture=en-US&EventID=1032416862&CountryCode=US.
Is the information incorrect or am missing something somewhere?
--
Bruce Sanderson
http://members.shaw.ca/bsanders/
It's perfectly useless to know the right answer to the wrong question.
.
- Follow-Ups:
- Re: BitLocker related settings - some appear to be missing
- From: Bruce Sanderson
- RE: BitLocker related settings - some appear to be missing
- From: David Shen [MSFT]
- Re: BitLocker related settings - some appear to be missing
- Prev by Date: Forcing user to log off
- Next by Date: Configuring group policy through a txt file
- Previous by thread: Forcing user to log off
- Next by thread: RE: BitLocker related settings - some appear to be missing
- Index(es):
Relevant Pages
|