How to Recover a Drive in Recovery Mode
Tuotteet: Microsoft BitLocker Administration and Monitoring 2.5
This topic explains how to use the Administration and Monitoring Website (also referred to as the Help Desk) to get a recovery password to give to end users if their BitLocker-protected drive goes into recovery mode. Drives go into recovery mode if users lose or forget their PIN or password or if the Trusted Module Platform (TPM) chip detects changes to the BIOS or startup files of a computer.
To get a recovery password, use the Drive Recovery area of the Administration and Monitoring Website. You must be assigned the MBAM Helpdesk Users role or the MBAM Advanced Helpdesk Users role to access this area of the website.
Huomautus
You may have given these roles different names when you created them. For more information, see Administration and Monitoring Website (Help Desk) accounts.
Tärkeä
Recovery passwords expire after a single use. On operating system drives and fixed data drives, the single-use rule is applied automatically. On removable drives, it is applied when the drive is removed and then reinserted and unlocked on a computer that has Group Policy settings activated to manage removable drives.
To recover a drive in recovery mode
Open a web browser and navigate to the Administration and Monitoring Website.
In the left pane, select Drive Recovery to open the Recover access to an encrypted drive page.
Enter the end user’s Windows log-on domain and user name to view recovery information.
Huomautus
If you are in the MBAM Advanced Helpdesk Users group, the user domain and user ID fields are not required.
Enter the first eight digits of the recovery key ID to see a list of possible matching recovery keys, or enter the entire recovery key ID to get the exact recovery key.
From the Reason for Drive Unlock list, select one of the predefined options, and then click Submit.
MBAM returns the following:
An error message if no matching recovery password is found
Multiple possible matches if the user has multiple matching recovery passwords
The recovery password and recovery package for the submitted user
Huomautus
If you are recovering a damaged drive, the recovery package option provides BitLocker with critical information that it needs to recover the drive.
After the recovery password and recovery package are retrieved, the recovery password is displayed.
To copy the password, click Copy Key, and then paste the recovery password into an email message. Alternatively, click Save to save the recovery password to a file.
When the user types the recovery password into the system or uses the recovery package, the drive is unlocked.
Got a suggestion for MBAM? Add or vote on suggestions here.
Got a MBAM issue? Use the MBAM TechNet Forum.