In general, using only the manage-bde.exe -on command will encrypt the operating system volume with a TPM-only protector and no recovery key. Listed below are examples of basic valid commands for operating system volumes. Using manage-bde with operating system volumes The following sections provide examples of common usage scenarios for manage-bde. A volume encrypted in this manner still requires user interaction to turn on BitLocker protection, even though the command successfully completed because an authentication method needs to be added to the volume for it to be fully protected. For example, using just the manage-bde.exe -on command on a data volume will fully encrypt the volume without any authenticating protectors. Manage-bde includes fewer default settings and requires greater customization for configuring BitLocker. For a complete list of the manage-bde.exe options, see the Manage-bde command-line reference. Manage-bde offers additional options not displayed in the BitLocker control panel. Manage-bde is a command-line tool that can be used for scripting BitLocker operations. The tools can be used to perform any tasks that can be accomplished through the BitLocker control panel and are appropriate to use for automated deployments and other scripting scenarios. Photo Credit: Anton Watman / Shutterstock.BitLocker drive encryption tools include the command-line tools manage-bde.exe, repair-bde.exe, and the cmdlets for Windows PowerShell. Stick to LTSB version of Windows 10 for now.

So what can you do to keep your computer secure? Well, until a fix is released for the problem, there are limits to the protective steps you can take, but Laiho offers the following advice: And of course that this doesn't require any external hardware or additional software. The real issue here is the Elevation of Privilege that takes a non-admin to SYSTEM (the root of Windows) even on a BitLocker (Microsoft's hard disk encryption) protected machine. While exploiting the bug - which, we are assured, Microsoft is 'working on' - does require access to a computer, it is still a concern. He reveals that exploiting the bug takes nothing more than pressing Shift + F10 during the upgrade and you can then access the Command Prompt in the Windows PE (Preinstallation Environment) used during the upgrade. The reason for this is that BitLocker is disabled during the update process, as security expert Sami Laiho points out.

By taking advantage of the bug, it is possible to access a Command Prompt and gain unrestricted access to the contents of the hard drive. A bug has been discovered in the way Windows 10 handles a Feature Update - the installation of a new build of the operating system.

What is bitlocker msn