BitLocker's reliance on a TPM for security is its own downfall in this specific exploit.
  • tiasEnglish
    3·
    vor 2 Jahren

    Thanks, that sounds really useful. I’m guessing it won’t work unless you’re local admin though.

      • tiasEnglish
        24·
        vor 2 Jahren

        Which kind of makes it useless in many corporate environments where it’s most needed, since the users won’t be able to set their own password.

        • d3Xt3r@lemmy.nzEnglish
          5·
          vor 2 Jahren

          I mean, if it’s a corporate device then it’s really a policy IT should be setting - this can be easily be done via a GPO or Intune policy, where an elevated script can prompt the end-user for a password.

          • LifeInMultipleChoice@lemmy.worldEnglish
            2·
            vor 2 Jahren

            Yarp. And when they forget it we use the 48 numerical recovery key found using the recovery ID that shows on the screen when you hit escape (from the bitlocker screen)

            • tiasEnglish
              1·
              vor 2 Jahren

              I’m talking about letting the user change their own password. I’m honestly not sure how that would be technically accomplished in this situation without having to contact IT each time. It seems like something Microsoft should provide a no-frills GUI for that doesn’t require elevation.