Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

My current process of encrypting user laptops is to set the password for myself, create a rescue disk, test login and have user set the password to their liking. I do this while physically with the laptop.

How can I encrypt the remote laptops without knowing the user password and having a rescue disk with a password that only I know while being remote? I can't remote into the machine until it boots into Windows.

Secondly how can I reset the password remotely without giving the user the rescue disk with my password? I stress to the users that I can't easily reset their password so don't forget it but I'm bound to have to do a reset at some point. I feel like I'd need to have the user send me their laptop to not give up the credentials.


share|improve this question
You won't be able to encrypt a laptop remotely. You do understand if you encrypt the laptop, that password, can't be reset right? – Ramhound May 15 '13 at 14:04
so far as I am aware, this is not possible with full disk encryption, unless you physically possess the device. we usually provide our users an encrypted volume in their user profile space, and allow them to mount it at will, and we do extract a header file with an admin password, so we can let the user change the password and then restore it to the known one if required, but this cannot be done without a running copy of the truecrypt client. – Frank Thomas May 15 '13 at 14:08
My thought is if the user has to go out of their way to save to the encrypted volume they won't do it. So I use full disk encryption. – PHLiGHT May 15 '13 at 17:40
Resetting the password. I set a known password and create a rescue disk that will allow to set it back to the password that I know that is tied to the rescue disk. See the warning on – PHLiGHT May 15 '13 at 17:42

You must log in to answer this question.

Browse other questions tagged .