Tag Archives: AD DS

How to fix “Your Active Directory Domain Services schema isn’t configured to run BitLocker Drive Encryption.”

Windows 10

BitLocker Drive Encryption is the technology in Windows 10 which can encrypt your hard disk drive and keep your data safe. It will usually require you to enter a pin/usb key/certificate to allow access to the encrypted hard disk drive.

Your Windows administrators are able to manage many of the settings in Active Directory, which helps in getting consistent settings across all end user computers.  If you try and turn on BitLocker and you get the following error read on how to fix it.

“Your Active Directory Domain Services schema isn’t configured to run BitLocker Drive Encryption. Contact your system administrator.”Your Active Directory Domain Services schema isn't configured to run bitlocker drive encryption contact your system administrator Continue reading

Where are my FSMO roles?

Microsoft

Here is a quick and easy way to find out the location of the FSMO roles. It works from Windows 2008 to Windows 2012, I’ve not tried it on 2003, but then you should of upgraded by now anyway!

Open a Command Prompt.

Type: netdom query FSMO

netdom query fsmoObviously on my SBS server above they are all going to be in one place, but in larger environments, they will quite often be split up and moved from server to server as and when new hardware is introduced and old hardware retired.