Tuesday, 20 September 2016

Enforce BitLocker key backup saving to Active Directory

When BitLocker backup to AD has been turned on after configuring BitLocker on domain computers, then no keys are existing in the AD.
To enforce sending BitLocker key to AD, you need to:

1.Get ID and password from the needed computer:
manage-bde -protectors -get c:

2.Make a backup to AD for selected ID
manage-bde -protectors -adbackup c: -id {enter id of Numerical Password ID here}

If you see below error

this means that AD is not correctly set - computer has no permission to save backup to AD.

Tuesday, 6 September 2016

Install feature on Windows Server core (2008R2)

Hi guys,
How to install features on Windows 2008R2 core ?
Just use dism.

1.Get list of all features
Dism /online /get-features /format:table
2. Select one and install it - I will choose SNMP:
Dism /online /enable-feature /featurename:SNMP-SC

3. Check if the feature has been installed:
Dism /online /get-features /format:table

And remember to logoff with
shutdown /l

More info on the Technet site: