Bitlocker with TPM and Offline Password Editor

Hi,

If I enable Bitlocker with TPM (i.e. no passcode required on boot-up), and I have the Local Administrator account enabled on the machine (with my normal user account as a standard account), would it be possible for someone with a Hirens Boot CD blank/reset the Local Administrator account password and then gain access to the PC/Laptop using a tool such as this: Offline Windows Password & Registry Editor

Should I be enabling the PIN/Password protection on BitLocker, or does BitLocker prevent these sorts of tools from being used?

Thanks,

Gary

No. If the boot order is changed then it will prompt for your bitlocker password (the really long 25 digit one).

Secondly even if your bios was set to boot USB first the drive is encrypted so you couldn't do anything with it anyway without unlocking it first. I don't think Hirens has bitlocker support (only TrueCrypt) but even if you have bitlocker support you still need to unlock the drive.

Some boot USBs can unlock bitlocker drives automatically (like Adding BitLocker support to Windows PE - KnowledgeBase - Macrium Reflect Knowledgebase) but you would have to make a conscious decision to do this and leave the USB where you saved the keys plugged in.