Share via

How to Unified Control BITLOCK Users

Yanwen Zhong 0 Reputation points
2023-05-05T05:37:48.6266667+00:00

Dear

 I would like to install bitlock on all clients in a domain environment and inquire about how to uniformly control all client encryption through a console,If there are any relevant plans, please provide them to me. Thank you.
Microsoft 365 Publishing
Microsoft 365 Publishing
Microsoft 365: Formerly Office 365, is a line of subscription services offered by Microsoft which adds to and includes the Microsoft Office product line. Publishing: The process of preparing, producing, and releasing content for distribution or sale.
603 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Daniel Woodfin 0 Reputation points
    2023-05-07T23:59:06.9066667+00:00

    If you are familiar with Group Policies in an on-premises Active Directory, you can use those to manage BitLocker on your domain. Make sure you install these RSAT tools on your workstation:

    • Active Directory Domain Services (AD DS) Tools and Active Directory Lightwight Directory Services (AD LDS) Tools
    • BitLocker Drive Encryption Administration Utilities
    • Group Policy Management Tools

    You can set a Group Policy that all computers in certain Organizational Units must be encrypted with BitLocker and have their recovery keys backed up to your Domain Controller. This will allow you to pull the recovery key from a new "BitLocker Recovery" tab in a computer's Properties page within the AD Users and Computers MMC snap-in.

    0 comments