Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is there a way to enable bitlocker and save off key during setup via the unattend file? How else would you deploy bitlocker?

share|improve this question
up vote 1 down vote accepted

The recommended store for BitLocker recovery keys is ActiveDirectory since it holds other sensitive information as well. Plus, you get the advantages of AD as well (for example, that the recovery key is replicated across the domain controllers so it is viewable as long as at least one DC is alive).

General information how to enable can be found on TechNet.

Are you using Microsoft Deployment Toolkit (MDT) to deploy Windows 7? If so, you can easily set BitLocker encryption using the GUI – see this blog post for details.

Sometimes it can happen that your AD has not the correct permissions for the computer to update the recovery key, which means the automatic rollout fails. A step by step guide to resolve this can be found here. Note: If this happens, you only need to set it once and then never bother with it again.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.