Windows 10: Unlock laptop bitlocked drive using bde-manage and computer SID obtained from Active directory

I have a laptop that was bitlocked and the user updated the lenovo rom and locked up the laptop. I do not know the recovery ID or key for the drive. Question: Can I unlock the drive locally using the winre option of the manage-bde exe using the SID parameter obtained from the computer information stored in active directory? I see the syntax, but it does not unlock using the computer sid obtained from active directory wth the syntax of s-1-xxxxThank you in advance,J

:)

 

Need correct syntax to use manage-bde command to unlock bitlocker encrypted drive

My laptop hard drive is encrypted. I am prompted to enter a bitlocker pin at boot up. It gets me to logon screen. I am trying to use manage-bde command to unlock my drive. What is correct syntax for entering the pin?

I tried manage-bde -unlock c: -password

than I entered my pin but it it did not work.

When I tried manage-bde -status,

I see the Key Protectors as

TPM + Pin

Pin

Numerical Password.

 

BitLocker drive re-encrypted itself, unprompted... is there any way to access these files?

Hi George Carathanasis,



Thank you for writing to Microsoft Community Forums.



If you had previously enabled BitLocker on the dead laptop, then removing the drive and connecting to another computer will also ask for the BitLocker credentials and you cannot access the data with the credentials.



You can unlock removable data drives by using a password, a smart card, or you can configure a SID protector to unlock a drive by using your domain credentials. After you've started encryption, the drive can also be automatically unlocked on a specific
computer for a specific user account. System administrators can configure which options are available for users, as well as password complexity and minimum length requirements. To unlock by using a SID protector, use Manage-bde:



Manage-bde -protectors -add e: -sid domain\username



After the drive has been encrypted and protected with BitLocker, local and domain administrators can use the Manage BitLocker page in the BitLocker Drive Encryption item in Control Panel to change the password to unlock the drive, remove the password
from the drive, add a smart card to unlock the drive, save or print the recovery key again, automatically unlock the drive, duplicate keys, and reset the PIN.



For reference, you may refer Unlock-BitLocker and
BitLocker and Active Directory Domain Services (AD DS) FAQ.



If you are still facing issues with BitLocker, then I suggest you to post your query in
IT Pro TechNet Forums, where we have
support professionals who are well equipped with the knowledge on BitLocker on Active Directory.

 

HELP: Automatic BitLocker Unlock.

Thank you sir, ill try your solution.

Windows Auto unlock ONLY works in case you have Bitlocker on your system drive, because if your system drive is not encrypted auto unlocking other drives means loss of security.
But in my case my system drive is Encrypted with hardware encryption that i password unlock during boot. So auto unlocking Bitlocker drives will do fine for me.