GPO policy: "Choose how BitLocker-protected fixed drives can be recovered" — data recovery agent (DRA) option. Controls whether Data Recovery Agents may be used to recover BitLocker- protected fixed data drives. Registry: HKLM\SOFTWARE\Policies\Microsoft\FVE:FDVManageDRA (REG_DWORD). Reference: BitLocker CSP (FixedDrivesRecoveryOptions)
Values
| Enum Value | Description |
|---|---|
|
|
Data Recovery Agents not allowed (registry value 0). DRAs cannot be used to recover BitLocker-protected fixed data drives. |
|
|
Data Recovery Agents allowed (registry value 1). Configured DRAs may decrypt BitLocker-protected fixed data drives for recovery purposes. |
Used by
ComputerAdministrativeTemplatestype: Computer-specific Administrative Templates (ADMX) settings on an Endpoint.
Example
Example
"DISALLOW"