deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-13 05:47:23 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

updates

Browse Source
This commit is contained in:
Paolo Matarazzo 2023-10-10 19:15:30 -04:00
parent 1a3c4e3c1b
commit c484bb6094
1 changed files with 6 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
windows/security/operating-system-security/data-protection/bitlocker/recovery-guide-screen.md
View File

@ -17,10 +17,10 @@ This article describes the information displayed in the BitLocker recovery scree
## Custom recovery message
:::row:::
:::column span="3":::
:::column span="2":::
BitLocker policy settings allow configuring a custom recovery message and URL on the BitLocker recovery screen. The custom recovery message and URL can include the address of the BitLocker self-service recovery portal, the IT internal website, or a phone number for support.
:::column-end:::
:::column span="1":::
:::column span="2":::
:::image type="content" source="images/recovery-message-url.png" alt-text="Screenshot of the BitLocker recovery screen showing a custom URL." lightbox="images/recovery-message-url.png":::
:::column-end:::
:::row-end:::
@ -30,10 +30,10 @@ For more information, see [Configure preboot recovery message and URL](policy-se
## BitLocker recovery key hints
:::row:::
:::column span="3":::
:::column span="2":::
BitLocker metadata includes information about when and where a BitLocker recovery key was saved. This information isn't exposed through the UI or any public API. It's used solely by the BitLocker recovery screen in the form of hints to help a user locate a volume's recovery key. Hints are displayed on the recovery screen and refer to the location where the key was saved. The hints apply to both the boot manager recovery screen and the WinRE unlock screen.
:::column-end:::
:::column span="1":::
:::column span="2":::
:::image type="content" source="images/recover-message-hint.png" alt-text="Screenshot of the BitLocker recovery screen showing a hint where the BitLocker recovery key was saved." lightbox="images/recover-message-hint.png":::
:::column-end:::
:::row-end:::
@ -44,10 +44,10 @@ For more information, see [Configure preboot recovery message and URL](policy-se
There are rules governing which hint is shown during the recovery (in the order of processing):
1. Always display custom recovery message, if configured via policy settings
1. Always display generic hint: **For more information, go to https://aka.ms/recoverykeyfaq.**
1. Always display generic hint: **For more information, go to https://aka.ms/recoverykeyfaq**
1. If multiple recovery keys exist on the volume, prioritize the last-created (and successfully backed up) recovery key
1. Prioritize keys with successful backup over keys that have never been backed up
1. Prioritize backup hints in the following order for remote backup locations: **Microsoft Account > Azure AD > Active Directory**
1. Prioritize backup hints in the following order for remote backup locations: **Microsoft Account > Microsoft Entra ID > Active Directory**
1. If a key has been printed and saved to file, display a combined hint **Look for a printout or a text file with the key**, instead of two separate hints
1. If multiple backups of the same type (remove vs. local) were done for the same recovery key, prioritize backup info with latest backup date
1. There's no specific hint for keys saved to an on-premises Active Directory. In this case, a custom message (if configured) or a generic message, **Contact your organization's help desk**, is displayed
@ -99,8 +99,6 @@ There are rules governing which hint is shown during the recovery (in the order
:::column-end:::
:::row-end:::
**Result:** Only the Microsoft Account hint is displayed.
### Example: multiple recovery passwords
:::row:::