From 4fc874485f52608820c967b1bb1928ee30df89df Mon Sep 17 00:00:00 2001 From: Tommy Date: Sat, 30 Dec 2023 17:28:29 -0700 Subject: [PATCH] Bitlocker note for domain controller Signed-off-by: Tommy --- Group Policies Objects/Bitlocker.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/Group Policies Objects/Bitlocker.md b/Group Policies Objects/Bitlocker.md index 15e7649..3f79ae2 100644 --- a/Group Policies Objects/Bitlocker.md +++ b/Group Policies Objects/Bitlocker.md @@ -1,5 +1,7 @@ # Bitlocker Drive Encryption +**On Domain Controllers, Bitlocker and tools need to be installed as a feature in Server Manager first.** + `Computer Configuration\Administrative Templates\Windows Components\Bitlocker Drive Encryption` Choose drive encryption method and cipher strength-> Enable -> XTS-AES 256-bit for operating system, fixed data, and removable drives. For Windows Vista, Windows Server 2008, etc... use AES 256-bit.