1.    09 Dec 2006 #1
    Ragnar Guest

    Windows Vista Bitlocker Active Directory Schema


    Hi

    Where can I find the Active Directory Schema script/procedure required to
    enable Bitlocker recovery to Active Directory? Isn't it available for
    download yet?

    Thanks.

    Regards,
    Ragnar

      My System SpecsSystem Spec

  2.    10 Dec 2006 #2
    Jorge de Almeida Pinto [MVP - DS] Guest

    Re: Windows Vista Bitlocker Active Directory Schema


    Tomek provides information about this:
    http://blogs.dirteam.com/blogs/tomek...-features.aspx

    --

    Cheers,
    (HOPEFULLY THIS INFORMATION HELPS YOU!)

    # Jorge de Almeida Pinto # MVP Windows Server - Directory Services

    BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
    BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
    ------------------------------------------------------------------------------------------
    * This posting is provided "AS IS" with no warranties and confers no rights!
    * Always test before implementing!
    ------------------------------------------------------------------------------------------
    #################################################
    #################################################
    ------------------------------------------------------------------------------------------
    "Ragnar" <Ragnar@noemail.noemail> wrote in message
    news:ea2k0Q%23GHHA.1216@TK2MSFTNGP05.phx.gbl...
    > Hi
    >
    > Where can I find the Active Directory Schema script/procedure required to
    > enable Bitlocker recovery to Active Directory? Isn't it available for
    > download yet?
    >
    > Thanks.
    >
    > Regards,
    > Ragnar



      My System SpecsSystem Spec

  3.    11 Dec 2006 #3
    Ragnar Guest

    Re: Windows Vista Bitlocker Active Directory Schema


    Thanks for your reply.

    However I have already tried these schema extensions in a test environment -
    they did not help me enable Bitlocker recovery to AD. The
    "VistaSecurity_TWP.doc" document refers to something called "BitLocker
    Active Directory Deployment Pack". Do you (or anyone else) know where I may
    get a hold of this, seems that this will contain additional details as well
    as the "AddWriteACEs.vbs" script needed to configure some permissions.

    Regards,
    Ragnar





    "Jorge de Almeida Pinto [MVP - DS]"
    <SubstituteThisWithMyFullNameSeparatedByDots@gmail.com> wrote in message
    news:eQL54$FHHHA.420@TK2MSFTNGP06.phx.gbl...
    > Tomek provides information about this:
    > http://blogs.dirteam.com/blogs/tomek...-features.aspx
    >
    > --
    >
    > Cheers,
    > (HOPEFULLY THIS INFORMATION HELPS YOU!)
    >
    > # Jorge de Almeida Pinto # MVP Windows Server - Directory Services
    >
    > BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
    > BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
    > ------------------------------------------------------------------------------------------
    > * This posting is provided "AS IS" with no warranties and confers no
    > rights!
    > * Always test before implementing!
    > ------------------------------------------------------------------------------------------
    > #################################################
    > #################################################
    > ------------------------------------------------------------------------------------------
    > "Ragnar" <Ragnar@noemail.noemail> wrote in message
    > news:ea2k0Q%23GHHA.1216@TK2MSFTNGP05.phx.gbl...
    >> Hi
    >>
    >> Where can I find the Active Directory Schema script/procedure required to
    >> enable Bitlocker recovery to Active Directory? Isn't it available for
    >> download yet?
    >>
    >> Thanks.
    >>
    >> Regards,
    >> Ragnar

    >
    >


      My System SpecsSystem Spec

  4.    11 Dec 2006 #4
    Mika Seitsonen Guest

    Re: Windows Vista Bitlocker Active Directory Schema


    Hi Ragnar,

    You should not use ADprep on Vista DVD as the results are not what you look
    for. Microsoft will make information on storing Bitlocker Recovery keys in
    AD available soon - I'd guess when its ready ADprep command and accompanying
    ldf files on Vista DVD are there for informational purpose only and as such
    they should not be used in production AD (2000/2003/R2).

    HTH
    Mika

    > Thanks for your reply.
    >
    > However I have already tried these schema extensions in a test
    > environment - they did not help me enable Bitlocker recovery to AD.
    > The "VistaSecurity_TWP.doc" document refers to something called
    > "BitLocker Active Directory Deployment Pack". Do you (or anyone else)
    > know where I may get a hold of this, seems that this will contain
    > additional details as well as the "AddWriteACEs.vbs" script needed to
    > configure some permissions.
    >
    > Regards,
    > Ragnar
    > "Jorge de Almeida Pinto [MVP - DS]"
    > <SubstituteThisWithMyFullNameSeparatedByDots@gmail.com> wrote in
    > message news:eQL54$FHHHA.420@TK2MSFTNGP06.phx.gbl...
    >
    >> Tomek provides information about this:
    >> http://blogs.dirteam.com/blogs/tomek.../Schema-extens
    >> ions-for-Vista-new-features.aspx
    >> --
    >>
    >> Cheers,
    >> (HOPEFULLY THIS INFORMATION HELPS YOU!)
    >> # Jorge de Almeida Pinto # MVP Windows Server - Directory Services
    >>
    >> BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
    >> BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
    >> ---------------------------------------------------------------------
    >> ---------------------
    >> * This posting is provided "AS IS" with no warranties and confers no
    >> rights!
    >> * Always test before implementing!
    >> ---------------------------------------------------------------------
    >> ---------------------
    >> #################################################
    >> #################################################
    >> ---------------------------------------------------------------------
    >> ---------------------
    >> "Ragnar" <Ragnar@noemail.noemail> wrote in message
    >> news:ea2k0Q%23GHHA.1216@TK2MSFTNGP05.phx.gbl...
    >>> Hi
    >>>
    >>> Where can I find the Active Directory Schema script/procedure
    >>> required to enable Bitlocker recovery to Active Directory? Isn't it
    >>> available for download yet?
    >>>
    >>> Thanks.
    >>>
    >>> Regards,
    >>> Ragnar



      My System SpecsSystem Spec

  5.    13 Dec 2006 #5
    Ragnar Guest

    Re: Windows Vista Bitlocker Active Directory Schema


    Hi

    Yes I also found that it did not work with these schema extensions. So it is
    as I feared - patience is required while we wait on Microsoft to provide the
    necessary information and tools....Thanks.


    /Ragnar


    "Mika Seitsonen" <mika.seitsonen_at_iki.fi> wrote in message
    news:779f3f61875e8c8eb8c8909035f@msnews.microsoft.com...
    > Hi Ragnar,
    >
    > You should not use ADprep on Vista DVD as the results are not what you
    > look for. Microsoft will make information on storing Bitlocker Recovery
    > keys in AD available soon - I'd guess when its ready ADprep command and
    > accompanying ldf files on Vista DVD are there for informational purpose
    > only and as such they should not be used in production AD (2000/2003/R2).
    >
    > HTH
    > Mika
    >
    >> Thanks for your reply.
    >>
    >> However I have already tried these schema extensions in a test
    >> environment - they did not help me enable Bitlocker recovery to AD.
    >> The "VistaSecurity_TWP.doc" document refers to something called
    >> "BitLocker Active Directory Deployment Pack". Do you (or anyone else)
    >> know where I may get a hold of this, seems that this will contain
    >> additional details as well as the "AddWriteACEs.vbs" script needed to
    >> configure some permissions.
    >>
    >> Regards,
    >> Ragnar
    >> "Jorge de Almeida Pinto [MVP - DS]"
    >> <SubstituteThisWithMyFullNameSeparatedByDots@gmail.com> wrote in
    >> message news:eQL54$FHHHA.420@TK2MSFTNGP06.phx.gbl...
    >>
    >>> Tomek provides information about this:
    >>> http://blogs.dirteam.com/blogs/tomek.../Schema-extens
    >>> ions-for-Vista-new-features.aspx
    >>> --
    >>>
    >>> Cheers,
    >>> (HOPEFULLY THIS INFORMATION HELPS YOU!)
    >>> # Jorge de Almeida Pinto # MVP Windows Server - Directory Services
    >>>
    >>> BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
    >>> BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
    >>> ---------------------------------------------------------------------
    >>> ---------------------
    >>> * This posting is provided "AS IS" with no warranties and confers no
    >>> rights!
    >>> * Always test before implementing!
    >>> ---------------------------------------------------------------------
    >>> ---------------------
    >>> #################################################
    >>> #################################################
    >>> ---------------------------------------------------------------------
    >>> ---------------------
    >>> "Ragnar" <Ragnar@noemail.noemail> wrote in message
    >>> news:ea2k0Q%23GHHA.1216@TK2MSFTNGP05.phx.gbl...
    >>>> Hi
    >>>>
    >>>> Where can I find the Active Directory Schema script/procedure
    >>>> required to enable Bitlocker recovery to Active Directory? Isn't it
    >>>> available for download yet?
    >>>>
    >>>> Thanks.
    >>>>
    >>>> Regards,
    >>>> Ragnar

    >
    >


      My System SpecsSystem Spec

  6.    12 Jan 2007 #6
    Mika Seitsonen Guest

    Re: Windows Vista Bitlocker Active Directory Schema


    Hi again,

    The guide and included LDIF file and scripts are finally available:
    http://www.microsoft.com/downloads/d...displaylang=en

    A bit more information on http://msmvps.com/blogs/mika/archive...formation.aspx.
    I've tested all of the tools with Lenovo Thinkpad T60 and found them working

    HTH
    Mika

    > Hi
    >
    > Yes I also found that it did not work with these schema extensions. So
    > it is as I feared - patience is required while we wait on Microsoft to
    > provide the necessary information and tools....Thanks.
    >
    > /Ragnar
    >
    > "Mika Seitsonen" <mika.seitsonen_at_iki.fi> wrote in message
    > news:779f3f61875e8c8eb8c8909035f@msnews.microsoft.com...
    >
    >> Hi Ragnar,
    >>
    >> You should not use ADprep on Vista DVD as the results are not what
    >> you look for. Microsoft will make information on storing Bitlocker
    >> Recovery keys in AD available soon - I'd guess when its ready
    >> ADprep command and accompanying ldf files on Vista DVD are there for
    >> informational purpose only and as such they should not be used in
    >> production AD (2000/2003/R2).
    >>
    >> HTH
    >> Mika
    >>> Thanks for your reply.
    >>>
    >>> However I have already tried these schema extensions in a test
    >>> environment - they did not help me enable Bitlocker recovery to AD.
    >>> The "VistaSecurity_TWP.doc" document refers to something called
    >>> "BitLocker Active Directory Deployment Pack". Do you (or anyone
    >>> else) know where I may get a hold of this, seems that this will
    >>> contain additional details as well as the "AddWriteACEs.vbs" script
    >>> needed to configure some permissions.
    >>>
    >>> Regards,
    >>> Ragnar
    >>> "Jorge de Almeida Pinto [MVP - DS]"
    >>> <SubstituteThisWithMyFullNameSeparatedByDots@gmail.com> wrote in
    >>> message news:eQL54$FHHHA.420@TK2MSFTNGP06.phx.gbl...
    >>>> Tomek provides information about this:
    >>>> http://blogs.dirteam.com/blogs/tomek...04/Schema-exte
    >>>> ns
    >>>> ions-for-Vista-new-features.aspx
    >>>> --
    >>>> Cheers,
    >>>> (HOPEFULLY THIS INFORMATION HELPS YOU!)
    >>>> # Jorge de Almeida Pinto # MVP Windows Server - Directory Services
    >>>> BLOG (WEB-BASED)-->
    >>>> http://blogs.dirteam.com/blogs/jorge/default.aspx
    >>>> BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
    >>>> -------------------------------------------------------------------
    >>>> --
    >>>> ---------------------
    >>>> * This posting is provided "AS IS" with no warranties and confers
    >>>> no
    >>>> rights!
    >>>> * Always test before implementing!
    >>>> -------------------------------------------------------------------
    >>>> --
    >>>> ---------------------
    >>>> #################################################
    >>>> #################################################
    >>>> -------------------------------------------------------------------
    >>>> --
    >>>> ---------------------
    >>>> "Ragnar" <Ragnar@noemail.noemail> wrote in message
    >>>> news:ea2k0Q%23GHHA.1216@TK2MSFTNGP05.phx.gbl...
    >>>>> Hi
    >>>>>
    >>>>> Where can I find the Active Directory Schema script/procedure
    >>>>> required to enable Bitlocker recovery to Active Directory? Isn't
    >>>>> it available for download yet?
    >>>>>
    >>>>> Thanks.
    >>>>>
    >>>>> Regards,
    >>>>> Ragnar



      My System SpecsSystem Spec

  7.    01 Feb 2007 #7
    Ragnar Guest

    Re: Windows Vista Bitlocker Active Directory Schema


    Thank you for posting this!

    I'll test it during the weekend....

    /Ragnar



    "Mika Seitsonen" <mika.seitsonen_at_iki.fi> wrote in message
    news:779f3f61112248c9043e13456105@msnews.microsoft.com...
    > Hi again,
    >
    > The guide and included LDIF file and scripts are finally available:
    > http://www.microsoft.com/downloads/d...displaylang=en
    >
    > A bit more information on
    > http://msmvps.com/blogs/mika/archive...formation.aspx.
    > I've tested all of the tools with Lenovo Thinkpad T60 and found them
    > working
    >
    > HTH
    > Mika
    >
    >> Hi
    >>
    >> Yes I also found that it did not work with these schema extensions. So
    >> it is as I feared - patience is required while we wait on Microsoft to
    >> provide the necessary information and tools....Thanks.
    >>
    >> /Ragnar
    >>
    >> "Mika Seitsonen" <mika.seitsonen_at_iki.fi> wrote in message
    >> news:779f3f61875e8c8eb8c8909035f@msnews.microsoft.com...
    >>
    >>> Hi Ragnar,
    >>>
    >>> You should not use ADprep on Vista DVD as the results are not what
    >>> you look for. Microsoft will make information on storing Bitlocker
    >>> Recovery keys in AD available soon - I'd guess when its ready
    >>> ADprep command and accompanying ldf files on Vista DVD are there for
    >>> informational purpose only and as such they should not be used in
    >>> production AD (2000/2003/R2).
    >>>
    >>> HTH
    >>> Mika
    >>>> Thanks for your reply.
    >>>>
    >>>> However I have already tried these schema extensions in a test
    >>>> environment - they did not help me enable Bitlocker recovery to AD.
    >>>> The "VistaSecurity_TWP.doc" document refers to something called
    >>>> "BitLocker Active Directory Deployment Pack". Do you (or anyone
    >>>> else) know where I may get a hold of this, seems that this will
    >>>> contain additional details as well as the "AddWriteACEs.vbs" script
    >>>> needed to configure some permissions.
    >>>>
    >>>> Regards,
    >>>> Ragnar
    >>>> "Jorge de Almeida Pinto [MVP - DS]"
    >>>> <SubstituteThisWithMyFullNameSeparatedByDots@gmail.com> wrote in
    >>>> message news:eQL54$FHHHA.420@TK2MSFTNGP06.phx.gbl...
    >>>>> Tomek provides information about this:
    >>>>> http://blogs.dirteam.com/blogs/tomek...04/Schema-exte
    >>>>> ns
    >>>>> ions-for-Vista-new-features.aspx
    >>>>> --
    >>>>> Cheers,
    >>>>> (HOPEFULLY THIS INFORMATION HELPS YOU!)
    >>>>> # Jorge de Almeida Pinto # MVP Windows Server - Directory Services
    >>>>> BLOG (WEB-BASED)-->
    >>>>> http://blogs.dirteam.com/blogs/jorge/default.aspx
    >>>>> BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
    >>>>> -------------------------------------------------------------------
    >>>>> --
    >>>>> ---------------------
    >>>>> * This posting is provided "AS IS" with no warranties and confers
    >>>>> no
    >>>>> rights!
    >>>>> * Always test before implementing!
    >>>>> -------------------------------------------------------------------
    >>>>> --
    >>>>> ---------------------
    >>>>> #################################################
    >>>>> #################################################
    >>>>> -------------------------------------------------------------------
    >>>>> --
    >>>>> ---------------------
    >>>>> "Ragnar" <Ragnar@noemail.noemail> wrote in message
    >>>>> news:ea2k0Q%23GHHA.1216@TK2MSFTNGP05.phx.gbl...
    >>>>>> Hi
    >>>>>>
    >>>>>> Where can I find the Active Directory Schema script/procedure
    >>>>>> required to enable Bitlocker recovery to Active Directory? Isn't
    >>>>>> it available for download yet?
    >>>>>>
    >>>>>> Thanks.
    >>>>>>
    >>>>>> Regards,
    >>>>>> Ragnar

    >
    >


      My System SpecsSystem Spec


Similar Threads
Thread Forum
Applying SBS2003 R2 schema extension to Active Directory
I need to update my Active Directory on my SBS 2003 R2 server to with the 2003 R2 Active Directory schema to fulfill a prereq on a DFS setup I'm...
SBS Server
vbscripting on windows 2008 active directory
I have been using, windows 2003, the following command to map group users to their respective departmental drives. 'Grab the user name...
VB Script
Backing up BitLocker recovery keys to Active Directory
I have written a short guide about how to backup BitLocker recovery keys to Active Directory, find out what you need at...
Vista security
Extending Active Directory Schema for Bitlocker recovery information
Hi I'm performing the BitLocker Active Directory schema extension with the commands and files described in the "Configuring Active Directory to...
Vista General
Extending Active Directory Schema for Bitlocker recovery information
Hi I'm performing the BitLocker Active Directory schema extension with the commands and files described in the "Configuring Active Directory to...
Vista security
Windows Vista Bitlocker Active Directory Schema
Hi Where can I find the Active Directory Schema script/procedure required to enable Bitlocker recovery to Active Directory? Isn't it available...
Vista installation & setup
Group Policy for Vista in Windows 2000 Active Directory Domain
If we add a Vista machine into a domain that is run by Windows 2000 domain controllers, what adjustments are required to group policy? Would it...
Vista General

Our Sites
  • Ten Forums
  • Eight Forums
  • Seven Forums
  • PC Help Forum
  • Help Me Bake
  • Site Links
  • Contact Us
  • Privacy and Cookies
  • About Us
    Windows Vista Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

    Designer Media Ltd
    All times are GMT -5. The time now is 13:03.
    .