Reference Guide
Security Management Server Virtual v10.2.11 AdminHelp
to BitLocker
Protected
Fixed Data
Drives from
Earlier
Versions of
Windows
Not Selected
When Selected, fixed data drives with the FAT file system can
be unlocked and viewed on computers running Windows Server
2008. This policy does not apply to drives that are formatted
with the NTFS file system.
Set this policy to Selected and the Do Not Install BitLocker
to Go Reader on FAT formatted Fixed Drives policy to Not
Selected to allow BitLocker to Go Reader to be installed on
the fixed drive.
Do Not Install
BitLocker to
Go Reader on
FAT Formatted
Fixed Drives
Not Selected
Selected
Not Selected
If this policy is Not Selected, BitLocker to Go Reader is
installed on the fixed drive to enable users to unlock the
drive on computers running Windows Server 2008.
Set this policy to Not Selected and the Allow Access to
BitLocker Protected Fixed Data Drives from Earlier Versions of
Windows policy to Not Selected to allow BitLocker to Go Reader
to be installed on the fixed drive.
Configure Use
of Passwords
for Fixed Data
Drives
Allow
Allow
Require
Disallow
When set to Require, a connection to a domain controller is
necessary to validate the complexity of the password. When set
to Allow, a connecti
on to a domain controller is attempted to
validate complexity, but if no domain controller is found, the
password will still be accepted. When set to Do Not Allow, no
password complexity validation is done.
To use this policy, Configure Use of Passwords fo
r Fixed Data
Drives must be set to Allow or Require.
Configure
Password
Complexity for
Fixed Data
Drives
Allow
Do Not Allow
Require
Allow
When set to Require, a connection to a domain controller is
necessary to validate the complexity of the password. Whe
n set
to Allow, a connection to a domain controller is attempted to
validate complexity, but if no domain controller is found, the
password will still be accepted. When set to Do Not Allow, no
password complexity validation is done.
To use this policy, Con
figure Use of Passwords for Fixed Data
Drives must be set to Allow or Require.
Minimum
Password
Length for
Fixed Data
Drives
8
8 min
20 max
Passwords must be at least 8 characters. To configure a
greater minimum length for the password enter the desired
number of characters.
To use this policy, Configure Use of Passwords for Fixed Data
Drives must be set to Allow or Require.
Encryption
Type for Fixed
Data Drives
Full Encryption
Full Encryption
Used Space Only Encryption
Select the type of encryption to use for Fixed Data Drives.
Choose How
BitLocker-
protected
Fixed Drives
Can be
Recovered
Not Selected
Selected
Not Selected
BitLocker drives can always be recovered with BitLocker
Manager, even if this value is Not Selected. This policy
allows for the control of how BitLocker protected fixed data
drives are recovered in the absence of the required
credentials.
More...
This policy is the parent policy to:
143