Hi
How to encrypt the drives other then operating system ie D,E using GPO ?
thanks in Advance
Hi
How to encrypt the drives other then operating system ie D,E using GPO ?
thanks in Advance
The built-in standard GPOs don't start the encryption, they only configure it.
To start it, you need MBAM. Do you have MBAM? If you haven't, you will need to use scripts like those I show here:
https://www.experts-exchange.com/articles/33771/We-have-bitlocker-so-we-need-MBAM-too.html?preview=hG26jVC1xow%3D
Hi,
Within the GPO for Bitlocker, there is three different sub folders.. Removable drives, OS Drives and Fixed Data Drives. You can configure your GPO for the other two if you dont want the OS volume encrypted and it wont be touched
Thanks
Hi there,
There are different policy settings that determine the encryption methods and encryption types that are used with BitLocker.
-Enforce drive encryption type on fixed data drives
-Enforce drive encryption type on operating system drives
-Enforce drive encryption type on removable data drives
Here is a link for a detailed description of the process that you must follow.
Enforce drive encryption type on removable data drives
https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-group-policy-settings#bkmk-detyperdd
--If the reply is helpful, please Upvote and Accept it as an answer--
42 people are following this question.