This commit is contained in:
Paolo Matarazzo
2023-10-10 08:02:11 -04:00
parent 6dd83f3248
commit c3d1003f1a
3 changed files with 10 additions and 7 deletions

View File

@ -65,7 +65,7 @@ sections:
Yes.
- question: |
What is the difference between *suspending* and *decrypting* BitLocker?
What is the difference between suspending and decrypting BitLocker?
answer: |
*Decrypt* completely removes BitLocker protection and fully decrypts the drive.

View File

@ -15,11 +15,13 @@ To plan a BitLocker deployment, understand the current environment. Perform an i
To help document the organization's current disk encryption security policies, answer the following questions:
- Are there policies to determine which devices must use BitLocker and which computers don't?
- What policies exist to control recovery password and recovery key storage?
- What are the policies for validating the identity of users who need to perform BitLocker recovery?
- What policies exist to control who in the organization has access to recovery data?
- What policies exist to control computer decommissioning or retirement?
| :ballot_box_with_check: | **Question** |
|--|--|
| :red_square_button: | **Are there policies to determine which devices must use BitLocker and which computers don't?** |
| :black_square_button: | **What policies exist to control recovery password and recovery key storage?** |
| :black_square_button: | **What are the policies for validating the identity of users who need to perform BitLocker recovery?** |
| :black_square_button: | **What policies exist to control who in the organization has access to recovery data?** |
| :black_square_button: | **What policies exist to control computer decommissioning or retirement?** |
## Encryption keys and authentication

View File

@ -594,4 +594,5 @@ For a complete list of the `repair-bde.exe` options, see the [Repair-bde referen
<!--
By default, only Domain Admins have access to BitLocker recovery information, but [access can be delegated to others](/archive/blogs/craigf/delegating-access-in-ad-to-bitlocker-recovery-information).
-->>
-->>