deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-12 05:17:22 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity
windows-itpro-docs/windows/security/operating-system-security/data-protection/bitlocker/includes/configure-recovery-password-rotation.md
Gary Moore 6adf269a9d Remove endash from "Entra–joined" 
This seems like a departure from guidance that we had for Active Directory and Azure AD, but Paolo says it's not approved terminology.
2023-11-06 08:28:43 -08:00

1.2 KiB
Raw Blame History

author, ms.author, ms.date, ms.topic
author ms.author ms.date ms.topic
paolomatarazzo paoloma 10/30/2023 include

Configure recovery password rotation

With this policy you can configure a numeric recovery password rotation upon use for OS and fixed drives on Microsoft Entra joined and Microsoft Entra hybrid joined devices.

Possible values are:

  • 0: numeric recovery password rotation is turned off
  • 1: numeric recovery password rotation upon use is on for Microsoft Entra joined devices. This is also the default value
  • 2: numeric recovery password rotation upon use is on for both Microsoft Entra joined devices and Microsoft Entra hybrid joined devices

Note

The Policy is effective only when Micropsoft Entra ID or Active Directory backup for recovery password is configured to required

  • For OS drive: enable Do not enable BitLocker until recovery information is stored to AD DS for operating system drives
  • For fixed drives: enable "Do not enable BitLocker until recovery information is stored to AD DS for fixed data drives
Path
CSP ./Device/Vendor/MSFT/BitLocker/ConfigureRecoveryPasswordRotation
GPO Not available