Sign in
 
HomeWindows 8Windows 7Windows VistaWindows XPMDOPWindows IntuneLibraryForums
Windows Client >
> 
> 
Change of protector for OS drive possible after encryption?

Answered Change of protector for OS drive possible after encryption?

  • Monday, November 19, 2012 12:19 PM
     
     
    Sign In to Vote
    0

    Hello,

    I have the following question:

    If I encrypt the OS of a computer with MBAM BitLocker and use TPM+PIN as protector, is it possible to change the protector after the encryption finished? For example to TPM only?

    Best regards,

    Renate


    • Edited by RenateL Monday, November 19, 2012 12:20 PM
    •  
     

All Replies

  • Wednesday, November 21, 2012 12:25 PM
     
     Answered
    Sign In to Vote
    0

    Hello,

    I found a solution:

    • change the MBAM group policy, so that the protector for the drive is "TPM only" instead of "TPM and PIN"
    • load the new group policy

    change the protector:

    • start the command line and enter the following:
    • manage-bde -protectors -disable C:
    • manage-bde -protectors -delete C: -type TPMAndPIN
    • manage-bde -protectors -add C: -tpm
    • manage-bde -protectors -enable C:

    Best regards,

    Renate

    • Marked As Answer by RenateL Wednesday, November 21, 2012 12:25 PM
    •