Why Bitlocker takes longer to complete the encryption in Windows 10 as compared to Windows 7

Hello, my name is Ritesh Sinha and I am a Support Escalation Engineer on the Windows team.  Today’s blog will cover “Why Bitlocker takes longer to complete the encryption in Windows 10 as compared to Windows 7”. A brief summary of Bitlocker is: Bitlocker is a disk encryption system provided by Microsoft with the Windows… Read more

Setting up Data Recovery Agent for Bitlocker

You might have already read on TechNet and one of the other AskCore Blogson how to setup Data Recovery Agent (DRA) for BitLocker. However, how do you request a certificate from internal Certificate Authority (AD CS) to enable Data Recovery Agent (DRA). Naziya Shaik and I have written detailed instructions here and hope it is… Read more

How to make your existing Bitlocker encrypted environment FIPS complaint

Hello, my name is Mayank Sharma and I am a Technical Advisor here at Microsoft. In this blog, I will discuss FIPS compliance with Bitlocker. Microsoft's solution for completely encrypting data inside laptops, desktops and removable drives. So let’s get started… FIPS stands for Federal Information Processing Standard and is United States Government standards that… Read more

How to Cleanup TPM information from AD for Windows 8 computers

For Windows 7 machines, TPM Owner Password is stored in msTPM-OwnerInformation which is attribute of Computer object in AD. So if you delete the computer object, TPM Owner Password is also deleted. For Windows 8, TPM Owner Information is not stored directly under Computer Object. It is stored in a separate object which is linked… Read more

Announcing public availability of MBAM Compliance Data Cleanup Tool 2.0

We are happy to announce public availability of MBAM Compliance Data Cleanup Tool 2.0 (clean-mbam.exe), aka MBAMCDCT 2.0.   MBAM Compliance Data Cleanup Tool 2.0 (clean-mbam.exe) is a command line tool which enables you to delete machine records from the ‘Compliance Status’ database of the MBAM 1.0 and MBAM 2.0 standalone.   There have been… Read more

MMS 2013 Hands On Labs Available

A few months ago we held the annual 2013 Microsoft Management Summit in Las Vegas. As in years past, the event sold out quickly and it was a very busy week. To everyone that attended, our sincere thanks.  As a recap, the below blog gives you the list of available sessions online to view that… Read more

Sessions from MMS 2013 Now Available

Greetings AskCore fans.  I thought I would start creating a blog for a subset of the videos/sessions available at each of the conferences that Microsoft has throughout the year.  These sessions will be available and will deal with topics that are discussed here on the AskCore Blog.  There are numerous other sessions if you want… Read more

Announcing public availability of MBAM Compliance Data Cleanup Tool

Hello!! My name is Himanshu Singh and I am a Support Escalation Engineer with Windows Core Team at Microsoft. I am writing today to provide a solution to a particular problem many of you have faced with Microsoft Bitlocker Administration and Monitoring (MBAM) version 1.0. There have been situation where you as a MBAM Admin… Read more

Requirements to save Bitlocker Recovery Key to AD using MDT

My name is Naziya Shaik and I am a Support Escalation Engineer with Windows Core team @ Microsoft. I would like to share information about enabling BitLocker while deploying operating system via MDT and the group policies that are required to be configured in AD DS. If you use Microsoft Deployment Toolkit to deploy Windows… Read more

How to Verify BitLocker Recovery Keys in SQL DB using MBAM

Customers using BitLocker Drive Encryption to protect a volume might be curious to know, how to verify BitLocker Recovery keys in SQL database for MBAM. Consider this scenario: A Volume is already BitLocker encrypted and recovery information is backed up in Active Directory. We install the MBAM client on a Windows 7 client machine and… Read more