BitLocker key protector management help


  1. Posts : 2
    Windows 10
       #1

    BitLocker key protector management help


    Seeking BitLocker help:

    Win10 machine with TPM.
    OS drive was successfully encrypted with "TPM & PIN" additional key protection.
    Now I'm hoping to drop back to "just TPM" with no additional PIN protection without having to decrypt and re-encrypt. (note: the reason is so that updates will reboot back to windows login and leave this base station machine accessible by Remote (RDP) but the reason is not what I want to discuss)

    I haven't found how to do it yet and don't know whether to concentrate on the "manage-bde" commands or gpupdate or both to find the answer. None of the local bitlocker policies are enabled (but the machine is in an AD domain.) If I try the following:
    manage-bde -protectors -delete C: -Type TPMAndPIN
    (within an admin cmd prompt) I get:
    "ERROR: An error occurred while deleting the key protector.
    Group Policy settings require the use of a PIN at startup. Please choose this Bitlocker startup option."

    Is there a way I can check what the domain admin is requiring? I forget how to check the broader group policies on Win10.
    Thanks! tinten10
      My Computer


  2. Posts : 17,661
    Windows 10 Pro
       #2

    tinten10 said:
    Is there a way I can check what the domain admin is requiring?
    There is this very easy way: ask the admin. If admin accepts what you want to do, I am sure you get help. We cannot help you to work around policies set by your admin.
      My Computer


  3. Posts : 2
    Windows 10
    Thread Starter
       #3

    Thanks Kari, Yes, I'm trying to do that, it just takes time in a large organization. Meanwhile, if they are -not- ruling that my users have to have a PIN on top of the TPN I'm trying to figure out if I've found the right way to remove the PIN I set up without having to decrypt/re-encrypt....

    ~tinten10~
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 04:56.
Find Us




Windows 10 Forums