HKLM\Software\Policies\Microsoft\FVE

3 subkeys · 41 Group Policy settings use this key

Group Policy settings that use this key

41 results · page 1 of 3

  1. Allow access to BitLocker-protected fixed data drives from earlier versions of Windows

    Value name: FDVDiscoveryVolumeType, FDVNoBitLockerToGoReader 1 element Computer Configuration › Administrative Templates › Windows Components › BitLocker Drive Encryption › Fixed Data Drives Go to policy

  2. Allow access to BitLocker-protected removable data drives from earlier versions of Windows

    Value name: RDVDiscoveryVolumeType, RDVNoBitLockerToGoReader 1 element Computer Configuration › Administrative Templates › Windows Components › BitLocker Drive Encryption › Removable Data Drives Go to policy

  3. Allow devices compliant with InstantGo or HSTI to opt out of pre-boot PIN.

    Value name: OSEnablePreBootPinExceptionOnDECapableDevice REG_DWORD · Enabled 1 · Disabled 0 Computer Configuration › Administrative Templates › Windows Components › BitLocker Drive Encryption › Operating System Drives Go to policy

  4. Allow enhanced PINs for startup

    Value name: UseEnhancedPin REG_DWORD · Enabled 1 · Disabled 0 Computer Configuration › Administrative Templates › Windows Components › BitLocker Drive Encryption › Operating System Drives Go to policy

  5. Allow network unlock at startup

    Value name: OSManageNKP REG_DWORD · Enabled 1 · Disabled 0 Computer Configuration › Administrative Templates › Windows Components › BitLocker Drive Encryption › Operating System Drives Go to policy

  6. Allow Secure Boot for integrity validation

    Value name: OSAllowSecureBootForIntegrity REG_DWORD · Enabled 1 · Disabled 0 Computer Configuration › Administrative Templates › Windows Components › BitLocker Drive Encryption › Operating System Drives Go to policy

  7. Choose default folder for recovery password

    Value name: DefaultRecoveryFolderPath 1 element Computer Configuration › Administrative Templates › Windows Components › BitLocker Drive Encryption Go to policy

  8. Choose drive encryption method and cipher strength (Windows 10 [Version 1511] and later)

    Value name: EncryptionMethodWithXtsOs, EncryptionMethodWithXtsFdv, EncryptionMethodWithXtsRdv 3 elements Computer Configuration › Administrative Templates › Windows Components › BitLocker Drive Encryption Go to policy

  9. Choose drive encryption method and cipher strength (Windows 8, Windows Server 2012, Windows 8.1, Windows Server 2012 R2, Windows 10 [Version 1507])

    Value name: EncryptionMethodNoDiffuser 1 element Computer Configuration › Administrative Templates › Windows Components › BitLocker Drive Encryption Go to policy

  10. Choose drive encryption method and cipher strength (Windows Vista, Windows Server 2008, Windows 7, Windows Server 2008 R2)

    Value name: EncryptionMethod 1 element Computer Configuration › Administrative Templates › Windows Components › BitLocker Drive Encryption Go to policy

  11. Choose how BitLocker-protected fixed drives can be recovered

    Value name: FDVRecovery, FDVRecoveryPassword, FDVRecoveryKey, FDVManageDRA, FDVHideRecoveryPage, FDVActiveDirectoryBackup, FDVRequireActiveDirectoryBackup, FDVActiveDirectoryInfoToStore 7 elements Computer Configuration › Administrative Templates › Windows Components › BitLocker Drive Encryption › Fixed Data Drives Go to policy

  12. Choose how BitLocker-protected operating system drives can be recovered

    Value name: OSRecovery, OSManageDRA, OSRecoveryPassword, OSRecoveryKey, OSHideRecoveryPage, OSActiveDirectoryBackup, OSRequireActiveDirectoryBackup, OSActiveDirectoryInfoToStore 7 elements Computer Configuration › Administrative Templates › Windows Components › BitLocker Drive Encryption › Operating System Drives Go to policy

  13. Choose how BitLocker-protected removable drives can be recovered

    Value name: RDVRecovery, RDVRecoveryPassword, RDVRecoveryKey, RDVManageDRA, RDVHideRecoveryPage, RDVActiveDirectoryBackup, RDVRequireActiveDirectoryBackup, RDVActiveDirectoryInfoToStore 7 elements Computer Configuration › Administrative Templates › Windows Components › BitLocker Drive Encryption › Removable Data Drives Go to policy

  14. Choose how users can recover BitLocker-protected drives (Windows Server 2008 and Windows Vista)

    Value name: UseRecoveryPassword, UseRecoveryDrive 2 elements Computer Configuration › Administrative Templates › Windows Components › BitLocker Drive Encryption Go to policy

  15. Configure minimum PIN length for startup

    Value name: MinimumPIN 1 element Computer Configuration › Administrative Templates › Windows Components › BitLocker Drive Encryption › Operating System Drives Go to policy

  16. Configure pre-boot recovery message and URL

    Value name: RecoveryKeyMessageSource, RecoveryKeyMessage, RecoveryKeyUrl 3 elements Computer Configuration › Administrative Templates › Windows Components › BitLocker Drive Encryption › Operating System Drives Go to policy

  17. Configure use of hardware-based encryption for fixed data drives

    Value name: FDVHardwareEncryption, FDVAllowSoftwareEncryptionFailover, FDVRestrictHardwareEncryptionAlgorithms, FDVAllowedHardwareEncryptionAlgorithms 3 elements Computer Configuration › Administrative Templates › Windows Components › BitLocker Drive Encryption › Fixed Data Drives Go to policy

  18. Configure use of hardware-based encryption for operating system drives

    Value name: OSHardwareEncryption, OSAllowSoftwareEncryptionFailover, OSRestrictHardwareEncryptionAlgorithms, OSAllowedHardwareEncryptionAlgorithms 3 elements Computer Configuration › Administrative Templates › Windows Components › BitLocker Drive Encryption › Operating System Drives Go to policy

  19. Configure use of hardware-based encryption for removable data drives

    Value name: RDVHardwareEncryption, RDVAllowSoftwareEncryptionFailover, RDVRestrictHardwareEncryptionAlgorithms, RDVAllowedHardwareEncryptionAlgorithms 3 elements Computer Configuration › Administrative Templates › Windows Components › BitLocker Drive Encryption › Removable Data Drives Go to policy

  20. Configure use of passwords for fixed data drives

    Value name: FDVPassphrase, FDVEnforcePassphrase, FDVPassphraseComplexity, FDVPassphraseLength 3 elements Computer Configuration › Administrative Templates › Windows Components › BitLocker Drive Encryption › Fixed Data Drives Go to policy

Subkeys

Other keys in Microsoft

View all of Microsoft