1.    11 Apr 2016 #1
    Join Date : Apr 2016
    Posts : 2
    Windows 10

    BitLocker key protector management help

    Seeking BitLocker help:

    Win10 machine with TPM.
    OS drive was successfully encrypted with "TPM & PIN" additional key protection.
    Now I'm hoping to drop back to "just TPM" with no additional PIN protection without having to decrypt and re-encrypt. (note: the reason is so that updates will reboot back to windows login and leave this base station machine accessible by Remote (RDP) but the reason is not what I want to discuss)

    I haven't found how to do it yet and don't know whether to concentrate on the "manage-bde" commands or gpupdate or both to find the answer. None of the local bitlocker policies are enabled (but the machine is in an AD domain.) If I try the following:
    manage-bde -protectors -delete C: -Type TPMAndPIN
    (within an admin cmd prompt) I get:
    "ERROR: An error occurred while deleting the key protector.
    Group Policy settings require the use of a PIN at startup. Please choose this Bitlocker startup option."

    Is there a way I can check what the domain admin is requiring? I forget how to check the broader group policies on Win10.
    Thanks! tinten10
      My System SpecsSystem Spec

  2.    11 Apr 2016 #2
    Join Date : Oct 2013
    A Finnish ex-pat in Germany
    Posts : 8,743
    Windows 10 Pro

    Quote Originally Posted by tinten10 View Post
    Is there a way I can check what the domain admin is requiring?
    There is this very easy way: ask the admin. If admin accepts what you want to do, I am sure you get help. We cannot help you to work around policies set by your admin.
      My System SpecsSystem Spec

  3.    11 Apr 2016 #3
    Join Date : Apr 2016
    Posts : 2
    Windows 10

    Thanks Kari, Yes, I'm trying to do that, it just takes time in a large organization. Meanwhile, if they are -not- ruling that my users have to have a PIN on top of the TPN I'm trying to figure out if I've found the right way to remove the PIN I set up without having to decrypt/re-encrypt....

      My System SpecsSystem Spec


Similar Threads
Thread Forum
Power management?
When I change the power management to never turn the screen off on my desktop the setting is back to 15 minutes when the Pc is restarted. On my laptop I don't have this problem and I can't find a setting in the BIOS which can be the cause? I use...
General Support
How do you get to disk management?
I just installed Win 10. First impression is that I'm not impressed with the new design. I think mobile devices are ruining the internet. How do I get to disk management? Is it similar to Win 7? Also, how do I get to Services and Event Viewer?
General Support
Program Management
Hello I am from Denmark and I upgraded yesterday,perhaps i am a total idiot but how do you uinstall a program in windows 10,please help.:o
Software and Apps
A good ups/power surge protector for gaming ?
I hope this is the right spot for this question but, I was wondering if anyone has any good recommendations for a quality ups/power surge protector? *some additional info * BenQ XL2430T (1920x1080@144Hz EVGA | 850W 220-G2-0850-XR R. ( The...
Drivers and Hardware
VHD in Disk Management
I was looking in Disk management in Win 8.1 and under the "action tab", there is a choice to; Create VHD. I can't get a shot of it to show a snip. Has anyone used this ? Would this be safe to install Win 10 with ?
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 23:42.
Find Us
Twitter Facebook Google+

Windows 10 Forums