Forum Discussion

HanhTrinh's avatar
HanhTrinh
Copper Contributor
Sep 30, 2019

Manage Bitlocker Passwor/PIN ?

Hi everyone,

I have problem when deploy Bitlocker :

How can I manage bitlocker password  with normal user , Adminisrator/IT allow them change password/PIN permission , but we might block them "Turn off Bitlocker" ?

I used the policy :  

Disallow standard users from changing the PIN or password

Result :

- Normal user can't changing Password/PIN . When them click "Change Password ", need to verified by admin 

- Admin account can change Password .

Anyone can help me ?

Thank you very much !

  • DanielNiccoli's avatar
    DanielNiccoli
    Steel Contributor
    If you want to allow your users to change the BitLocker PIN, why to you enable "Disallow standard users from changing the PIN or password"? Remove that policy and your users will be able to change the BitLocker PIN.

    BitLocker can only be disabled by a local Administrator, so the defaults do exactly what you want.
    • HanhTrinh's avatar
      HanhTrinh
      Copper Contributor

      DanielNiccoli  I reviewed my policy and removed "Disallow standard users from changing the PIN or password".

      Now, normal user can change password but can't turn of Bitlocker .

      Thanks !

       

      • DanielNiccoli's avatar
        DanielNiccoli
        Steel Contributor

        HanhTrinhGlad that helped. Please consider marking it as an answer to help other people with the same question.

Resources