Help with Bitlocker requested

[peterp]

Hello,

Wondering if anyone could help.

 

I'm trying to configure Bitlocker on windows 7 enterprise (domain joined machines) without TPM.

 

I've set the 'require additional information' GPO and various password complexity ones.

 

However, the only open I get when I turn bitlocker on for a system drive is Require a Startup key at every startup.

 

Is it possible, and how would I configure it to require a password/pin to unlock the drive rather than a usb memory stick?

 

I've read various articles online about how to do it, but I don't get the options they show.

 

Hoping someone can help.

Thanks

Pete.

[sted]

I THINK with windows 7 you need a tpm and/or a usb drive I don't think it can be pin only. Windows 8.1/10 can be pin only

[psumner1992]

Unfortunately start up key is the only option with Windows 7.

 

The option for require password/pin will only work on devices without TPM running Windows 8.

 

We spent a good few weeks looking at this and from experience could only get it to work on Windows 7 with USB start up key.

[LeMarchand]

You could try Veracrypt instead though you might be better off upgrading to W8.1 or 10.

[peterp]

Strangely while waiting for replies on here, I did indeed try Veracrypt.

We will be upgrading to windows 10 at some point, but that is a ways down the road.

 

I had a feeling that bitlocker wouldn't allow windows 7 to encrypt with password.

 

Thanks for the info.

Pete.

[skyhawk]

Strangely while waiting for replies on here, I did indeed try Veracrypt.

We will be upgrading to windows 10 at some point, but that is a ways down the road.

 

I had a feeling that bitlocker wouldn't allow windows 7 to encrypt with password.

 

Thanks for the info.

Pete.

 

 

Morning,

it took us a while to figure BitLocker out and to make it very clear to staff who use the laptops to keep both devices separate, I think the "if you return the pen drive then we wont prosecute you" seemed to help.... if the laptop gets stolen and they return the pen drive I am not that bothered, still miffed that they lost a laptop but it is better than nothing and a device unlocked if they keep both together, so far touch wood all is good and with 100+ staff with laptops it seems to be working.....

 

no doubt just put the kiss of death on it and some one will walk in saying they have lost a laptop and the pen drive was in the bag

 

Andy

[peterp]

Morning,

... I think the "if you return the pen drive then we wont prosecute you" seemed to help.... Andy

 

 

*spits tea*, yeah, I'll try telling SLT that on my way to the dole office :-)

[skyhawk]

*spits tea*, yeah, I'll try telling SLT that on my way to the dole office :-)

 

LOL :D its called "Data Protection" is the staff have access to your MIS or any Student information on a laptop its pretty much a case closed.....

 

have a great day

 

Andy

 

(still chuckling)