Recovering BitLocker keys from the Active Directory康復BitLocker磁碟鑰匙從Active Directory
Here at the LazyAdmin we have talked quite a bit about在這裡，在lazyadmin我們講過不少位約 using BitLocker with Windows Vista .使用BitLocker磁碟與Windows Vista 。 With the introduction of Server 2008 you can now also leverage Bitlocker with your 2008 servers.與引進的服務器在2008年，你現在也可以利用BitLocker磁碟與您的2008服務器。 This is particularly attractive when deploying Read Only Domain Controllers (RODC) to remote locations where physical security is questionable.這是特別有吸引力時，部署只讀域控制器（ rodc ）到偏遠的地點，人身安全是值得商榷的。
One BitLocker features is the ability to backup your Bitlocker encryption key to the Active Directory. 1 BitLocker磁碟的特點是能夠備份您的BitLocker磁碟加密密鑰到Active Directory 。 In previous articles we have talked about enabling GPOs that can automatically backup BitLocker to AD.在以前的文章我們已經談到了有利的GPO可以自動備份BitLocker磁碟廣告。 However how do you see the BitLocker keys in the event that you need to access them?不過，您如何看待BitLocker磁碟鍵在萬一您需要使用他們呢？
The answer is the BitLocker Recovery Password Viewer:答案是BitLocker磁碟復甦的密碼查看：
The Password Viewer will work on any computer that is runs the Active Directory users and Computers console (ADUC).密碼Viewer將工作在任何電腦上是運行Active Directory用戶和計算機控制台（ aduc ） 。 In fact the viewer integrates into the ADUC console.事實上，觀眾整合入aduc控制台。 In order to integrate the add on the you must register the viewer component.在以整合添加對你必須註冊觀眾的組成部分。 In order to properly register the component you must run the installation as an Enterprise Administrator.為了適當地註冊組件，則必須運行安裝作為一個企業管理員。 After the component has been registered a standard domain account will suffice to view BitLocker keys.之後，該組件已註冊的標準域帳戶將足以檢視BitLocker磁碟機碼。
After downloading the MSU package and running it, open a command prompt and change directory to "%systemroot%\Windows\"下載後該MSU的包裝和運行它，打開一個命令提示符並將目錄變更為“的％ SystemRoot ％ \的Windows \ ”
Type: regsvr32.exe bdeaducext.dll類型： Regsvr32.exe的bdeaducext.dll
Once the DLL has successfully been integrated a confirmation message will appear.一旦DLL文件已成功整合了確認訊息將會出現。 Click OK and exit the command prompt.單擊確定，並退出命令提示符。
Open ADUC and open the properties dialog of a Computer object.開放aduc並打開屬性對話框的計算機對象。
Notice there is a new tab called BitLocker, this tab is where you can access the BitLocker recovery key.通知有一個新的標籤，所謂的BitLocker磁碟，此標籤在這裡您可以訪問BitLocker磁碟復甦的關鍵。 Below is a screen from a computer that has BitLocker enabled, and one that does not.下面是從屏幕的計算機已BitLocker磁碟啟用，和一個不。
You can also search for the BitLocker Recovery Password.您也可以搜索為BitLocker磁碟恢復密碼。
With the addition of the Bitlocker Recovery Viewer, the Bitlocker is truly a complete and very well integrated solution for securing the contents on mobile computers, and servers in less secure branch locations.與增補的BitLocker磁碟復甦的觀眾， BitLocker磁碟是一個真正的完整和很好的整合的解決方案，以確保內容的筆記本電腦和服務器在安全性較低分行的地點。
Written by daniel.nerenberg. 寫daniel.nerenberg 。 Read more great feeds at is source 閱讀更多偉大的飼料是來源 WEBSITE 網站
1 comment 1條評論 . 。
Read more articles on 閱讀更多的文章 dan.nerenberg dan.nerenberg and 和 Directory Services 目錄服務 and 和 otherSoftware othersoftware and 和 windows server 在Windows Server and 和 Security 安全 . 。
- [+] Digg [ + ] digg : Feature this article ：特徵此文章
- [+] Del.icio.us [ + ] del.icio.us : Bookmark this article ：書籤此文章
- [+] Furl [ + ] furl : Bookmark this article ：書籤此文章
#1 ＃ 1 . 。 August 6th, 2008, at 9:58 AM. 2008年8月6日，在上午09點58分。
After installing this update, I do not have a bdeaducext.dll file on the system to register.之後，安裝此更新，我手邊沒有一bdeaducext.dll文件對系統進行註冊。 Installer appeared to run fine.安裝程序出現運行的罰款。 Anyone else had this issue?其他人曾在這個問題？