If multiple changes are necessary to bring the drive into compliance, BitLocker protection may need to be suspended, the necessary changes made, and then protection resumed. This scenario could occur, for example, if a previously encrypted drive was brought out of compliance by change in Group Policy settings. When a drive becomes out of compliance with Group Policy settings, only changes to the BitLocker configuration that will bring it into compliance are allowed. If a computer isn't compliant with existing Group Policy settings, BitLocker may not be turned on, or BitLocker configuration may be modified until the computer is in a compliant state. Most of the BitLocker Group Policy settings are applied when BitLocker is initially turned on for a drive.

For details about those settings, see TPM Group Policy settings.īitLocker Group Policy settings can be accessed using the Local Group Policy Editor and the Group Policy Management Console (GPMC) under Computer Configuration > Administrative Templates > Windows Components > BitLocker Drive Encryption. A separate set of Group Policy settings supports the use of the Trusted Platform Module (TPM).

Download msdn pro