Security, et al

Whenever you encrypt data, you run the risk of losing access to that data if you lose the key.

I frequently receive calls for help from frantic admins who upgraded their boss’s PC and can’t access the EFS encrypted data - definitely a case of RTM.

Anyway the same risk exists for BitLocker Drive Encryption but you can configure BitLocker to backup keys to Active Directory before actually encrypting volumes.

The only problem is, until recently there was no easy-to-use tool available for accessing those backed up keys once you need them.

In talking to the Product Manager for BitLocker at Microsoft today I learned of a new tool I’m itching to test out. It’s the BitLocker Recovery Password Viewer and it integrates with Active Directory Users and Computers.

I just retained a developer to write such a tool - silly me.

Anyway you can read about the tool and obtain it at http://support.microsoft.com/?kbid=928202

I'll let you know how my testing goes. Please do the same for me.