BitLocker (förlorat lösenord)

Trädvy Permalänk
Medlem
Plats
Teckomatorp
Registrerad
Dec 2011

BitLocker (förlorat lösenord)

Hejsan

Stoppade i min externa Western Digital WD6400AAKS i min dator då den varit urkopplad och oanvänd 2~2&½år.
När jag högerklickar på den och trycker på BitLocker så jag kan få full tillgång till den så kräver den lösenord, men det minns inte jag.
Finns det något sätt man kan slingra sig ur denna situationen?

Tack på förhand.

Trädvy Permalänk
Medlem
Registrerad
Okt 2010

Du må väl ha sparat din bitlocker recoverykey, förhoppningsvis...
Någonstans...

Intel core i5 760 @ 3.63Ghz| Msi 560Ti HWK/9800GT| 10GB ram 1TB seagate|Noctua NH-U12P SE2| Fractal R3 White ||| Äpplet fick flytta sig för en mer arbetsinriktad maskin, Dell XPS15 (gen2) | IntelSB Core i7 2640m @ 3.2Ghz (Dualcore.m HT) | GF GT540m | 8GB ram | 500GB WD CavBlack | 1080P AdobeRBG | JBL-ljud |||
"VAR E CHIPPET!!?"

Trädvy Permalänk
Medlem
Plats
Södertälje
Registrerad
Feb 2005

Den är ju krypterad för att man inte ska kunna ta sig in.. Som swinto skrev har du förhoppningsvis en återställningsnyckel nånstans, annars lär det vara kört.

Trädvy Permalänk
Medlem
Registrerad
Dec 2011

http://technet.microsoft.com/en-us/library/ee424303(WS.10).as...

To specify how BitLocker-protected removable data drives can be recovered

Click Start, type gpedit.msc in the Search programs and files box, and then press ENTER.

If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Yes.

In the console tree under Local Computer Policy\Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption, click Removable Data Drives.

To configure recovery options for removable data drives, in the details pane, double-click Choose how BitLocker-protected removable data drives can be recovered to open the policy setting. If this policy setting is disabled or not configured, the default recovery options are supported for BitLocker recovery. By default, a data recovery agent is allowed, the user can choose to create a recovery password or a recovery key when they turn on BitLocker, and recovery information is not backed up to AD DS.

To specify different recovery options, click Enabled, and then configure the following settings as appropriate:
Select the Allow data recovery agent check box to allow specified accounts to be used to recover BitLocker-protected drives. To use a data recovery agent, the account must be configured and added to the following location in Group Policy: Computer Configuration\Windows Settings\Security Settings\Public Key Policies\BitLocker Drive Encryption. For more information about setting up data recovery agents, see Using Data Recovery Agents with BitLocker. Clear the check box if you do not want to allow data recovery agents to be used with BitLocker.

Under Configure user storage of BitLocker recovery information, you can choose whether or not a user is allowed, required, or not allowed to create a 48-digit recovery password or 256-bit recovery key when they turn-on BitLocker. By default, recovery keys are not used with removable data drives.

Select the Save BitLocker recovery information to AD DS for removable data drives check box, and then select whether you want to Store recovery passwords and key packages in AD DS or Store recovery passwords only. Storing recovery passwords in AD DS allows system administrators to provide recovery passwords to users or recover BitLocker-protected drives when the user-stored recovery password or recovery key is not available (for example, when a user loses the recovery password printout or when the stored recovery key file cannot be accessed). Storing the key packages in addition to the recovery passwords enables administrators to use the Repair-bde command-line tool to recover a BitLocker-protected drive that has been damaged in such a way that reading the encryption key from the drive is not possible.

Select the Do not enable BitLocker until recovery information is stored to AD DS for removable data drives check box to ensure that the recovery information for all BitLocker-protected removable data drives in your organization is stored in AD DS. Recovery information is generated when the drive is first encrypted and is not automatically sent to AD DS after encryption has occurred. When this check box is selected, users must be connected to the domain when they turn on BitLocker.

Select the Omit recovery options from the BitLocker setup wizard check box if you want the choice of recovery method to be controlled by this policy setting and not show the recovery options to the user. To enable this option, you must select one or both of the administrative recovery settings Save BitLocker recovery information to AD DS for removable data drives or Allow data recovery agent to ensure that the BitLocker-protected drive can be recovered.

After you have made your choices, click Apply to apply the settings, and then close the dialog box.

Close the Local Group Policy Editor.

To force Group Policy to apply the changes immediately, you can click Start, type gpupdate.exe /force in the Search programs and files box, and then press ENTER. Wait for the process to finish.

By completing the procedures in this scenario, you have configured the Group Policy settings establishing the recovery options available for operating system drives, fixed data drives, and removable data drives.