Omega Owners Forum

Please login or register.

Login with username, password and session length
Advanced search  

News:

Please play nicely.  No one wants to listen/read a keyboard warriors rants....

Pages: 1 [2]  All   Go Down

Author Topic: Bitlocker Encryption - Windows 7 Enterprise  (Read 2851 times)

0 Members and 1 Guest are viewing this topic.

Plomien

  • Omega Baron
  • *****
  • Offline Offline
  • Gender: Male
  • Swansea
  • Posts: 2349
  • Rescue the beer and drink the maiden
    • Landrover Freelander TD4
    • View Profile
Re: Bitlocker Encryption - Windows 7 Enterprise
« Reply #15 on: 28 December 2011, 05:28:40 »

let it transfer them as read only then run a batch program to change them from read only

You can't transfer items when the disk is read only, its write protected, you cannot copy to it  ;)

I missed the read only disc bit ::) ;)

does this help?
http://windows.microsoft.com/en-GB/windows-vista/What-is-the-difference-between-disabling-BitLocker-Drive-Encryption-and-decrypting-the-volume
or
http://technet.microsoft.com/en-us/library/cc766295%28WS.10%29.aspx
Logged
No more Omega but still hangs around

TheBoy

  • Administrator
  • *****
  • Offline Offline
  • Gender: Male
  • Brackley, Northants
  • Posts: 107031
  • I Like Lockdown
    • Whatever Starts
    • View Profile
Re: Bitlocker Encryption - Windows 7 Enterprise
« Reply #16 on: 28 December 2011, 09:49:22 »

Bitlocker is a great piece of software, compared to the other options like McAfee Safeboot.  I'm sure you fully understand why it has to be encrypted.

In a corporate environment, I wouldn't mind betting you are not supposed to be storing personal photos, vids and music on a work provided machine  :-X

With Bitlocker, you select what drives to encrypt, and there is an option to enforce encryption of 'new' devices as the machine sees them.  I wouldn't mind betting these settings are enforced via GPO, so as a minimum, you will likely need to be a Domain Administrator to block the inheritence of the settings for a specific OU (which would block it for every machine in that OU (Bitlocker is a PC specific option, not User specific)).

Assuming you're not a Domain Admin - a fair assumption I think given your skillset - the only option is out via the network, as in take the machine home and map a drive to your own PC.


I do know of ways to bypass GPO (temporarily) if you are an Admin of the PC, but you're in a whole world of getting sacked for doing such things - your company have turned bitlocker on (its not on by default), and presumably enforcing it via GPO, thus its mandatory.  Its safe to assume that bypassing that would, rightly, end up with a nice shiny P45.
Logged
Grumpy old man

tunnie

  • Get A Life!!
  • *****
  • Offline Offline
  • Gender: Male
  • Surrey
  • Posts: 37573
    • Zafira Tourer & BMW 435i
    • View Profile
Re: Bitlocker Encryption - Windows 7 Enterprise
« Reply #17 on: 28 December 2011, 10:01:59 »

and there is an option to enforce encryption of 'new' devices as the machine sees them.

Assuming you're not a Domain Admin - a fair assumption I think given your skillset - the only option is out via the network, as in take the machine home and map a drive to your own PC.


Yeah I am not a domain admin, only local. Sadly it is also enforced for any new plug in drive, I can see the point, as its been known for people to leave laptops on trains. But it renders working with external drives impossible. Going to have to think of a "business" excuse I think to get it disabled.

Unfortunately I don't have a machine at my parents any more. Just an external HD, I was just using the works laptop as a transport device to take them home as a backup. Although I do have some spare machines lying around I could setup  :-\
Logged

TheBoy

  • Administrator
  • *****
  • Offline Offline
  • Gender: Male
  • Brackley, Northants
  • Posts: 107031
  • I Like Lockdown
    • Whatever Starts
    • View Profile
Re: Bitlocker Encryption - Windows 7 Enterprise
« Reply #18 on: 28 December 2011, 10:09:31 »

Do your folks not have a PC?  What are you surfing on now (I hope not works laptop, as I wouldn't mind betting that would be a good bare bum spanking from Uncle Rupert)?

Copy files to that (via network), then onto portable drive  (or the other way round, not sure if you are copying pictures to or from)

In a works environment, I've never seen a suitable business justification to not have encryption.  A portable drive/flash is more likely to get lost than a laptop ;)
Logged
Grumpy old man

tunnie

  • Get A Life!!
  • *****
  • Offline Offline
  • Gender: Male
  • Surrey
  • Posts: 37573
    • Zafira Tourer & BMW 435i
    • View Profile
Re: Bitlocker Encryption - Windows 7 Enterprise
« Reply #19 on: 28 December 2011, 10:17:16 »

Currently using works laptop  ::) - Never been told can't use it as a personal machine too. Because I am on-call 1 week in 5 too, even more reason I keep it at home a lot.

Wireless network here only G spec, fatherT usings work laptop too. Only machine ours now is mother T's - Guess only option is RJ45 into the router, external drive in motherT's laptop. Map a drive & copy  :(

Trouble I've been having thinking of an excuse, hence finding a work around!
Logged

TheBoy

  • Administrator
  • *****
  • Offline Offline
  • Gender: Male
  • Brackley, Northants
  • Posts: 107031
  • I Like Lockdown
    • Whatever Starts
    • View Profile
Re: Bitlocker Encryption - Windows 7 Enterprise
« Reply #20 on: 28 December 2011, 10:23:09 »

Currently using works laptop  ::) - Never been told can't use it as a personal machine too. Because I am on-call 1 week in 5 too, even more reason I keep it at home a lot.

Wireless network here only G spec, fatherT usings work laptop too. Only machine ours now is mother T's - Guess only option is RJ45 into the router, external drive in motherT's laptop. Map a drive & copy  :(

Trouble I've been having thinking of an excuse, hence finding a work around!
Read your IT policy when back in office. In my experience, ignorance has never worked as an excuse to avoid the 'rock and roll' (Dole queue).  I sail close to the wind in most things at our place, but even I haven't used a current works lappy for personal use for 10+ years ;)

If its several Gb, RJ45 will always be better.  If both are gigabit cards, and the router is 100Mb, I'd just use a direct cable (most modern machines are auto mdx).  Most wifi can at best manage similar speed to a 10Mb hub (so HD), even N.
Logged
Grumpy old man

tunnie

  • Get A Life!!
  • *****
  • Offline Offline
  • Gender: Male
  • Surrey
  • Posts: 37573
    • Zafira Tourer & BMW 435i
    • View Profile
Re: Bitlocker Encryption - Windows 7 Enterprise
« Reply #21 on: 28 December 2011, 10:26:43 »

router is quite old, not even Gigabit.  :(

Hummm the MacBook Pro we have does not have BitLocker, they won't miss that  ::)  ;D
Logged

TheBoy

  • Administrator
  • *****
  • Offline Offline
  • Gender: Male
  • Brackley, Northants
  • Posts: 107031
  • I Like Lockdown
    • Whatever Starts
    • View Profile
Re: Bitlocker Encryption - Windows 7 Enterprise
« Reply #22 on: 28 December 2011, 11:26:35 »

router is quite old, not even Gigabit.  :(

Hummm the MacBook Pro we have does not have BitLocker, they won't miss that  ::)  ;D
The crApple won't do NTFS, so stuck with FAT32, max filesize is 4Gb (by default), so be careful if zipping up lots of files to copy.
Logged
Grumpy old man

TheBoy

  • Administrator
  • *****
  • Offline Offline
  • Gender: Male
  • Brackley, Northants
  • Posts: 107031
  • I Like Lockdown
    • Whatever Starts
    • View Profile
Re: Bitlocker Encryption - Windows 7 Enterprise
« Reply #23 on: 28 December 2011, 11:52:30 »

Talking of useful items for file tansfers, Santa brought me a 32Gb USB stick :D
Logged
Grumpy old man

aaronjb

  • Guest
Re: Bitlocker Encryption - Windows 7 Enterprise
« Reply #24 on: 28 December 2011, 13:17:03 »

router is quite old, not even Gigabit.  :(

Hummm the MacBook Pro we have does not have BitLocker, they won't miss that  ::)  ;D
The crApple won't do NTFS, so stuck with FAT32, max filesize is 4Gb (by default), so be careful if zipping up lots of files to copy.

It 'can' do NTFS, though .. MacFuse + ntfs3g; although the free version of ntfs3g is now 'crippleware' in that it's slow as molasses while the 'paid' version is fast (they used to be identical). I think there's another alternative, but I've never looked as I've not had to write to an NTFS drive for a while.

(It does read only natively, but that's obviously not much use to tunnie)
Logged

TheBoy

  • Administrator
  • *****
  • Offline Offline
  • Gender: Male
  • Brackley, Northants
  • Posts: 107031
  • I Like Lockdown
    • Whatever Starts
    • View Profile
Re: Bitlocker Encryption - Windows 7 Enterprise
« Reply #25 on: 28 December 2011, 17:49:54 »

Yeah, aware OSX does have some (commercial) NTFS capability - similar to old fashion NTFSDOS PC utils - but watching tunnie pay for such tools would be a site to behold ;D

What I meant, is for the OP, there aren't really viable NTFS options, whereas FAT32 works fine, but have to work around the default 4Gb file limit :)
Logged
Grumpy old man
Pages: 1 [2]  All   Go Up
 

Page created in 0.012 seconds with 16 queries.