Encrypting quantities utilizing the BitLocker Window PowerShell cmdlets

Window PowerShell cmdlets give a new way to utilize BitLocker. Having fun with Screen PowerShell’s scripting capabilities, directors can be integrate BitLocker alternatives towards the current programs with ease. Record less than displays new readily available BitLocker cmdlets.

Like manage-bde, new Screen PowerShell cmdlets allow configuration outside the choice offered in the fresh new panel. Just as in manage-bde, profiles must check out the certain needs of your own regularity it is encrypting just before powering Window PowerShell cmdlets.

An effective 1st step should be to dictate the modern county away from the quantity(s) using the pc. This can be done utilizing the Rating-BitLocker volume cmdlet. This new efficiency out of this cmdlet displays information regarding the volume style of, protectors, coverage condition, or other helpful tips.

Sometimes, all the protectors may not be found while using Rating-BitLockerVolume on account of decreased area from the returns display. Unless you get a hold of the protectors having a beneficial volume, you are able to the fresh new Windows PowerShell tubing command (|) in order to structure a list of the fresh protectors.

In the event the there are many than five protectors for a volume, the latest pipe order get use up all your display area. To own quantities with over five protectors, utilize the method described on the area less than to produce a beneficial selection of most of the protectors that have guardian ID.

When you need to take away the present protectors prior to provisioning BitLocker on the volume, you can utilize the fresh Clean out-BitLockerKeyProtector cmdlet. Accomplishing this activity requires the GUID in the protector so you can go off. An easy software normally tube the prices of any Get-BitLockerVolume return off to another variable as the viewed lower than:

Using this software, we are able to display what in the $keyprotectors changeable to determine the GUID for each protector. With this particular recommendations, we are able to next remove the key guardian having a certain frequency making use of the demand:

Brand new BitLocker cmdlet necessitates the trick guardian GUID sealed within the quotation marks to execute. Make

sure the whole GUID, with braces, is included on the order.

Operating systems regularity

Utilising the BitLocker Window PowerShell cmdlets is a lot like handling the new do-bde tool for encrypting systems volumes. Windows PowerShell offers profiles enough independency. Instance, profiles will add the mandatory protector as a key part demand to have encrypting eHarmony vs OkCupid 2021 the volume. Below are examples of preferred affiliate issues and measures to complete them with the BitLocker cmdlets to possess Window PowerShell.

The analogy below contributes you to definitely more protector, the new StartupKey protectors, and you will chooses to miss the BitLocker knowledge decide to try. In this example, encoding starts immediately without the need for an excellent restart.

Analysis frequency

Data regularity encoding playing with Windows PowerShell is the same as to possess operating system volumes. Are the wanted protectors ahead of encrypting the volume. Another example contributes a code protector for the Age: frequency making use of the adjustable $pw once the code. The new $pw changeable is stored since the a beneficial SecureString worth to store new user-outlined password. History, security initiate.

Using an SID-established guardian during the Windows PowerShell

The newest ADAccountOrGroup protector is an energetic Directory SID-dependent protector. This protector should be put into both os’s and you will studies quantities, though it cannot discover operating system volumes regarding the pre-boot ecosystem. New protector necessitates the SID to the domain name account otherwise class to connection to the latest guardian. BitLocker can protect a group-aware disk with the addition of a keen SID-depending protector on People Name Object (CNO) you to lets the latest drive properly failover and be unlocked to the user computer system of the people.

The new SID-established guardian necessitates the access to a supplementary protector (for example TPM, PIN, recuperation trick, etcetera.) when placed on operating systems amounts.

To provide an ADAccountOrGroup protector to help you an amount, you would like sometimes the actual domain name SID or perhaps the category label preceded of the domain name and you may an effective backslash. Throughout the example lower than, new CONTOSO\Officer account try additional given that a protector on the analysis regularity G.