deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-06-16 19:03:46 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

updates

Browse Source
This commit is contained in:
Paolo Matarazzo
2023-10-31 13:31:21 -04:00
parent bd2ea23b46
commit fe8bbf40c4
2 changed files with 33 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
windows/security/operating-system-security/data-protection/bitlocker/recovery-process.md
View File

@ -316,4 +316,15 @@ manage-bde -unlock E: -Certificate -ct 9de688607336294a52b445d30d1eb92f0bec1e78
<!--After the recovery password has been used to recover access to the device, BitLocker reseals the encryption key to the current values of the measured components.
Domain Administrator privileges are required or delegated permissions must have been granted by a domain administrator.
Normal users will not see the recovery key and cannot search for it.
### Multiple recovery passwords
If multiple recovery passwords are stored under a computer object in AD DS, the name of the BitLocker recovery information object includes the date on which the password was created. To make sure the correct password is provided and/or to prevent providing the incorrect password, the help desk can ask the user to read the eight character password ID that is displayed in the preboot recovery screen.
Since the password ID is a unique value that is associated with each recovery password stored in AD DS, running a query using this ID finds the correct password to unlock the encrypted volume.
-->