Home

You can turn off BitLocker in the Control Panel > System and Security > BitLocker Drive Encryption. If the machine is a domain member, you have to edit the corresponding policies on the domain controller. If you just want to temporary disable the policies so you can fix the machine, you can remove the computer from its container.

I didn't have your second problem. I would turn off BitLocker, reboot and then encrypt the drive again.

Questions:
1. how do you decrypt a drive and remove bitlocker policies from a Laptop thats added to a domain.

2. why does bitlocker display recovery option after a machine has been recovered, it keeps going into recovery mode, is there a way we can fix this?

Please assit.

Thanks
Kunal

Forest functional level should be 2012, however with additional setup it is possible to set this up on an 08 R2 domain.  Obviously, at least one Server 2012 Domain Controller is necessary.

Hi Kyle,

I inherited an environment that has folder redirection turned on. I have made some progress, but have run into a question. I have been able to disable the folder redirection, but I'm curious if I can tweak it a bit. Right now, I have the folder redirection going away and it makes a copy of the contents on the local hard drive as well as leaving a copy on the users home drive. What I would like to have happen is leave the contents on the home drive and get rid of the redirection. Going forward they can store some stuff locally, but we would tell them to use their home drive for anything that should get backed up, etc. Let me know if I can provide any screenshots to help. Thanks!

[Read more]

Yes, PowerShell is part of Windows 10. I don't think that you can uninstall it.

Hi,

Does windows 10 have PowerShell installed by default?

This post will help you with sysprep.

https://enterinit.com/sysprep-was-not-able-to-validate-your-windows-installation/

Thanks, It helped me to uninstall an antivirus program in safe mode

On the Latest Windows 10, I have the service disabled.

It *still* installs updates.

I have now blocked wuauclt.exe and svchost.exe. Hope it works.

I'm running Win 10 - 1607 and I tried to use the gpo method (with gpedit not gpmc) to apply files associations at logon for existing users and ... there is no way. Any other change on reg is working but my file associations rule (my xml file is ok, I'm sure) doesn't change anything.

I've read in some threads that it works only for new users ....

What is my possible mistake or what is the workaround ?

Arnaud

Yes im typing the password and i did try copy and paste

We are not using the builtin local admin. Could that be the issue? I see documents that you specify the local admin name on laps gpo and it should work.

No worries. I appreciate your time.

Ren,

Hmm, it seems like you're doing everything correctly.

It may sound dumb but are you typing in the admin password? I prefer to use Remote Desktop, then copy/paste the password, as I find it difficult to distinguish between some of the characters.

And the account you're trying to log into is the built in local administrator (assuming you didn't point LAPS at a different account) using ".administrator" to prevent it from trying to use a domain account.

Other than that I'm running out of ideas for you to try, sorry.

I agree, very strange. I searched everywhere if i missed something and i even reconfigured it again but same thing.

-Yes the password shows in ADUC.

-Yes the password changed after i set the expiration to past.

-Yes the policy is applied after running gpresult /r.

-Under security filtering, computer is added and made sure the "apply group policy" is checked on.

-I enforced LAPS GPO.

-LAPS is installed on the machine.