If you have installed a new domain controller in an environment that uses AD to store BitLocker Recovery keys, you’ll notice that by default the Recovery Key tab is not present.
In this article I’ll show you how to add it.
Category Archives: Windows
How to fix “Your Active Directory Domain Services schema isn’t configured to run BitLocker Drive Encryption.”
BitLocker Drive Encryption is the technology in Windows 10 which can encrypt your hard disk drive and keep your data safe. It will usually require you to enter a pin/usb key/certificate to allow access to the encrypted hard disk drive.
Your Windows administrators are able to manage many of the settings in Active Directory, which helps in getting consistent settings across all end user computers. If you try and turn on BitLocker and you get the following error read on how to fix it.
“Your Active Directory Domain Services schema isn’t configured to run BitLocker Drive Encryption. Contact your system administrator.”
Continue reading
Top 10 Blog posts of 2017
Happy New Year!
In 2017 the OxfordSBSGuy.com blog has gone from strength to strength, with 26 posts and 863,000 views. In 2017 I implemented SSL and been working on some tweaks here and there to improve performance. This year I’m considering a redesign and new hosting is in the pipeline to improve performance further. Thank you for your support.
Below are the top ten articles in 2017
- PowerShell: Get-ADComputer to retrieve computer last logon date – part 1 (103,582 views)
- PowerShell: Get-ADUser to retrieve password last set and expiry information (83,394 views)
- Exchange PowerShell: How to list all SMTP email addresses in Exchange (63,442 views)
- How to convert a Hyper-V VHDX to VMDK for VMware Workstation (31,337 views)
- PowerShell: Get-ADUser to retrieve login scripts and home directories – Part 1 (31,017 views)
- How to install Exchange 2010 (SP3) on Windows Server 2012 (43,232 views)
- Server 2012: “Your current security settings do not allow this file to be downloaded” (29,374 views)
- Exchange PowerShell: How to enumerate Distribution Lists, managers and members (24,264 views)
- Dell PERC: How to clear the foreign configuration on a HDD using the Raid Configuration Utility (21,799 views)
- How to resolve VMware Workstation “The network bridge on device ‘VMnet0’ is not running” (21,737 views)
Looking forward to 2018, the industry recently has been focusing on security so I’ll be brushing up on some Security Skills with Sophos and WatchGuard, and with more and more clients moving to Office 365, I intend to write a few more PowerShell scripting to help manage end users and computers in the cloud.
I hope you have a great year!
Carl
www.OxfordSBSGuy.com
How to move Windows 10 Sticky Notes from one user profile to another
This is a very quick post on how to move Windows 10 Sticky Notes from on user profile to another. This will be useful if you are moving from a local to a domain account, changing computers. Or just want to give someone else a copy of your Sticky Notes.
How to stop an embedded Excel spreadsheet in OneNote increasing in size
I’ve been using OneNote extensively now for a couple of years, but there is one bug bear I have, each time I edit an embedded Excel spreadsheet and save it, the spreadsheet increases in size, so after several separate edits its nearly doubled in size!
I’ve yet to find a solution to stop this from happening, but i have found an easy work around.
How to turn off Windows Update notifications for users on Server 2016 RDS
If you are running a Remote Desktop Services (RDS) server (terminal server), you don’t want the end users being notified there are updates to be applied, because they won’t have permission to apply them.
Use this quick GPO setting to disable the end user notification of Windows Updates.
Where’s Microsoft Edge browser on Server 2016?
If you are looking for the Microsoft Edge browser on Server 2016, look no further, it isn’t available! This is due to Windows Server 2016 being in the Long-Term Servicing Branch and the quicker rate of change of the Edge browser can’t be supported.
The official response from Microsoft is:
“The Long-Term Servicing Branch (LTSB) versions of Windows, including Windows Server 2016, don’t include Microsoft Edge or many other Universal Windows Platform (UWP) apps. These apps and their services are frequently updated with new functionality, and can’t be supported on systems running the LTSB operating systems. For customers who require the LTSB for specialized devices, we recommend using Internet Explorer 11.”
Source: https://docs.microsoft.com/en-us/microsoft-edge/deploy/hardware-and-software-requirements
It’s a shame not to have a consistent user experience between Windows 10 and Server 2016 especially in environments that use Remote Desktop Services.