If you have installed a new domain controller in an environment that uses AD to store BitLocker Recovery keys, you’ll notice that by default the Recovery Key tab is not present.
In this article I’ll show you how to add it.
BitLocker Drive Encryption is the technology in Windows 10 which can encrypt your hard disk drive and keep your data safe. It will usually require you to enter a pin/usb key/certificate to allow access to the encrypted hard disk drive.
Your Windows administrators are able to manage many of the settings in Active Directory, which helps in getting consistent settings across all end user computers. If you try and turn on BitLocker and you get the following error read on how to fix it.
“Your Active Directory Domain Services schema isn’t configured to run BitLocker Drive Encryption. Contact your system administrator.”
Continue reading
Happy New Year!
In 2017 the OxfordSBSGuy.com blog has gone from strength to strength, with 26 posts and 863,000 views. In 2017 I implemented SSL and been working on some tweaks here and there to improve performance. This year I’m considering a redesign and new hosting is in the pipeline to improve performance further. Thank you for your support.
Below are the top ten articles in 2017
Looking forward to 2018, the industry recently has been focusing on security so I’ll be brushing up on some Security Skills with Sophos and WatchGuard, and with more and more clients moving to Office 365, I intend to write a few more PowerShell scripting to help manage end users and computers in the cloud.
I hope you have a great year!
Carl
www.OxfordSBSGuy.com
This is a very quick post on how to move Windows 10 Sticky Notes from on user profile to another. This will be useful if you are moving from a local to a domain account, changing computers. Or just want to give someone else a copy of your Sticky Notes.
I’ve been using OneNote extensively now for a couple of years, but there is one bug bear I have, each time I edit an embedded Excel spreadsheet and save it, the spreadsheet increases in size, so after several separate edits its nearly doubled in size!
I’ve yet to find a solution to stop this from happening, but i have found an easy work around.
If you are running a Remote Desktop Services (RDS) server (terminal server), you don’t want the end users being notified there are updates to be applied, because they won’t have permission to apply them.
Use this quick GPO setting to disable the end user notification of Windows Updates.
If you are looking for the Microsoft Edge browser on Server 2016, look no further, it isn’t available! This is due to Windows Server 2016 being in the Long-Term Servicing Branch and the quicker rate of change of the Edge browser can’t be supported.
The official response from Microsoft is:
“The Long-Term Servicing Branch (LTSB) versions of Windows, including Windows Server 2016, don’t include Microsoft Edge or many other Universal Windows Platform (UWP) apps. These apps and their services are frequently updated with new functionality, and can’t be supported on systems running the LTSB operating systems. For customers who require the LTSB for specialized devices, we recommend using Internet Explorer 11.”
Source: https://docs.microsoft.com/en-us/microsoft-edge/deploy/hardware-and-software-requirements
It’s a shame not to have a consistent user experience between Windows 10 and Server 2016 especially in environments that use Remote Desktop Services.