deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-14 14:27:22 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

Added some bold, converted a table to markdown

Browse Source
This commit is contained in:
JanKeller1 2017-01-31 12:07:17 -08:00
parent 0dff66ce02
commit 8d53b2ca07
1 changed files with 11 additions and 49 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

60
windows/keep-secure/bitlocker-device-encryption-overview-windows-10.md
View File

@ -19,56 +19,18 @@ When users travel, their organization’s confidential data goes with them. Wher
Table 2 lists specific data-protection concerns and how they are addressed in Windows 10 and Windows 7. Table 2 lists specific data-protection concerns and how they are addressed in Windows 10 and Windows 7.
Table 2. Data Protection in Windows 10 and Windows 7 **Table 2. Data Protection in Windows 10 and Windows 7**
<table> | Windows 7 | Windows 10 |
<colgroup> |---|---|
<col width="50%" /> | When BitLocker is used with a PIN to protect startup, PCs such as kiosks cannot be restarted remotely. | Modern Windows devices are increasingly protected with device encryption out of the box and support SSO to seamlessly protect the BitLocker encryption keys from cold boot attacks.<br><br>Network Unlock allows PCs to start automatically when connected to the internal network. |
<col width="50%" /> | Users must contact the IT department to change their BitLocker PIN or password. | Modern Windows devices no longer require a PIN in the pre-boot environment to protect BitLocker encryption keys from cold boot attacks.<br><br>Users who have standard privileges can change their BitLocker PIN or password on legacy devices that require a PIN. |
</colgroup> | When BitLocker is enabled, the provisioning process can take several hours. | BitLocker pre-provisioning, encrypting hard drives, and Used Space Only encryption allow administrators to enable BitLocker quickly on new computers. |
<thead> | There is no support for using BitLocker with self-encrypting drives (SEDs). | BitLocker supports offloading encryption to encrypted hard drives. |
<tr class="header"> | Administrators have to use separate tools to manage encrypted hard drives. | BitLocker supports encrypted hard drives with onboard encryption hardware built in, which allows administrators to use the familiar BitLocker administrative tools to manage them. |
<th align="left">Windows 7</th> | Encrypting a new flash drive can take more than 20 minutes. | Used Space Only encryption in BitLocker To Go allows users to encrypt drives in seconds. |
<th align="left">Windows 10</th> | BitLocker could require users to enter a recovery key when system configuration changes occur. | BitLocker requires the user to enter a recovery key only when disk corruption occurs or when he or she loses the PIN or password. |
</tr> | Users need to enter a PIN to start the PC, and then their password to sign in to Windows. | Modern Windows devices are increasingly protected with device encryption out of the box and support SSO to help protect the BitLocker encryption keys from cold boot attacks. |
</thead>
<tbody>
<tr class="odd">
<td align="left"><p>When BitLocker is used with a PIN to protect startup, PCs such as kiosks cannot be restarted remotely.</p></td>
<td align="left"><p>Modern Windows devices are increasingly protected with device encryption out of the box and support SSO to seamlessly protect the BitLocker encryption keys from cold boot attacks.</p>
<p>Network Unlock allows PCs to start automatically when connected to the internal network.</p></td>
</tr>
<tr class="even">
<td align="left"><p>Users must contact the IT department to change their BitLocker PIN or password.</p></td>
<td align="left"><p>Modern Windows devices no longer require a PIN in the pre-boot environment to protect BitLocker encryption keys from cold boot attacks.</p>
<p>Users who have standard privileges can change their BitLocker PIN or password on legacy devices that require a PIN.</p></td>
</tr>
<tr class="odd">
<td align="left"><p>When BitLocker is enabled, the provisioning process can take several hours.</p></td>
<td align="left"><p>BitLocker pre-provisioning, encrypting hard drives, and Used Space Only encryption allow administrators to enable BitLocker quickly on new computers.</p></td>
</tr>
<tr class="even">
<td align="left"><p>There is no support for using BitLocker with self-encrypting drives (SEDs).</p></td>
<td align="left"><p>BitLocker supports offloading encryption to encrypted hard drives.</p></td>
</tr>
<tr class="odd">
<td align="left"><p>Administrators have to use separate tools to manage encrypted hard drives.</p></td>
<td align="left"><p>BitLocker supports encrypted hard drives with onboard encryption hardware built in, which allows administrators to use the familiar BitLocker administrative tools to manage them.</p></td>
</tr>
<tr class="even">
<td align="left"><p>Encrypting a new flash drive can take more than 20 minutes.</p></td>
<td align="left"><p>Used Space Only encryption in BitLocker To Go allows users to encrypt drives in seconds.</p></td>
</tr>
<tr class="odd">
<td align="left"><p>BitLocker could require users to enter a recovery key when system configuration changes occur.</p></td>
<td align="left"><p>BitLocker requires the user to enter a recovery key only when disk corruption occurs or when he or she loses the PIN or password.</p></td>
</tr>
<tr class="even">
<td align="left"><p>Users need to enter a PIN to start the PC, and then their password to sign in to Windows.</p></td>
<td align="left"><p>Modern Windows devices are increasingly protected with device encryption out of the box and support SSO to help protect the BitLocker encryption keys from cold boot attacks.</p></td>
</tr>
</tbody>
</table>
The sections that follow describe these improvements in more detail. The sections that follow describe these improvements in more detail.