Group Policy SearchGroup Policy Search
English

HKLM\Software\Policies\Microsoft\FVE

3 subkeys · 41 Group Policy settings use this key

Group Policy settings that use this key

41 results · page 2 of 3

  1. Configure use of passwords for operating system drives

    Value name: OSPassphrase, OSPassphraseComplexity, OSPassphraseLength, OSPassphraseASCIIOnly 3 elements Computer Configuration › Administrative Templates › Windows Components › BitLocker Drive Encryption › Operating System Drives Go to policy

  2. Configure use of passwords for removable data drives

    Value name: RDVPassphrase, RDVEnforcePassphrase, RDVPassphraseComplexity, RDVPassphraseLength 3 elements Computer Configuration › Administrative Templates › Windows Components › BitLocker Drive Encryption › Removable Data Drives Go to policy

  3. Configure use of smart cards on fixed data drives

    Value name: FDVAllowUserCert, FDVEnforceUserCert 1 element Computer Configuration › Administrative Templates › Windows Components › BitLocker Drive Encryption › Fixed Data Drives Go to policy

  4. Configure use of smart cards on removable data drives

    Value name: RDVAllowUserCert, RDVEnforceUserCert 1 element Computer Configuration › Administrative Templates › Windows Components › BitLocker Drive Encryption › Removable Data Drives Go to policy

  5. Control use of BitLocker on removable drives

    Value name: RDVConfigureBDE, RDVAllowBDE, RDVDisableBDE 2 elements Computer Configuration › Administrative Templates › Windows Components › BitLocker Drive Encryption › Removable Data Drives Go to policy

  6. Deny write access to removable drives not protected by BitLocker

    Value name: RDVDenyCrossOrg 1 element Computer Configuration › Administrative Templates › Windows Components › BitLocker Drive Encryption › Removable Data Drives Go to policy

  7. Disable BitLocker trust of Windows Recovery Environment (WinRE)

    Value name: DisableWinRETrust REG_DWORD · Enabled 1 · Disabled 0 Computer Configuration › Administrative Templates › Windows Components › BitLocker Drive Encryption › Operating System Drives Go to policy

  8. Disable new DMA devices when this computer is locked

    Value name: DisableExternalDMAUnderLock REG_DWORD · Enabled 1 · Disabled 0 Computer Configuration › Administrative Templates › Windows Components › BitLocker Drive Encryption Go to policy

  9. Disallow standard users from changing the PIN or password

    Value name: DisallowStandardUserPINReset REG_DWORD · Enabled 1 · Disabled 0 Computer Configuration › Administrative Templates › Windows Components › BitLocker Drive Encryption › Operating System Drives Go to policy

  10. Enable use of BitLocker authentication requiring preboot keyboard input on slates

    Value name: OSEnablePrebootInputProtectorsOnSlates REG_DWORD · Enabled 1 · Disabled 0 Computer Configuration › Administrative Templates › Windows Components › BitLocker Drive Encryption › Operating System Drives Go to policy

  11. Enforce drive encryption type on fixed data drives

    Value name: FDVEncryptionType 1 element Computer Configuration › Administrative Templates › Windows Components › BitLocker Drive Encryption › Fixed Data Drives Go to policy

  12. Enforce drive encryption type on operating system drives

    Value name: OSEncryptionType 1 element Computer Configuration › Administrative Templates › Windows Components › BitLocker Drive Encryption › Operating System Drives Go to policy

  13. Enforce drive encryption type on removable data drives

    Value name: RDVEncryptionType 1 element Computer Configuration › Administrative Templates › Windows Components › BitLocker Drive Encryption › Removable Data Drives Go to policy

  14. Prevent memory overwrite on restart

    Value name: MorBehavior REG_DWORD · Enabled 1 · Disabled 0 Computer Configuration › Administrative Templates › Windows Components › BitLocker Drive Encryption Go to policy

  15. Provide the unique identifiers for your organization

    Value name: IdentificationField, IdentificationFieldString, SecondaryIdentificationField 2 elements Computer Configuration › Administrative Templates › Windows Components › BitLocker Drive Encryption Go to policy

  16. Require additional authentication at startup

    Value name: UseAdvancedStartup, EnableBDEWithNoTPM, UseTPMKey, UseTPMPIN, UseTPMKeyPIN, UseTPM 5 elements Computer Configuration › Administrative Templates › Windows Components › BitLocker Drive Encryption › Operating System Drives Go to policy

  17. Require additional authentication at startup (Windows Server 2008 and Windows Vista)

    Value name: EnableNonTPM, UsePartialEncryptionKey, UsePIN 3 elements Computer Configuration › Administrative Templates › Windows Components › BitLocker Drive Encryption › Operating System Drives Go to policy

  18. Reset platform validation data after BitLocker recovery

    Value name: TPMAutoReseal REG_DWORD · Enabled 1 · Disabled 0 Computer Configuration › Administrative Templates › Windows Components › BitLocker Drive Encryption › Operating System Drives Go to policy

  19. Store BitLocker recovery information in Active Directory Domain Services (Windows Server 2008 and Windows Vista)

    Value name: ActiveDirectoryBackup, RequireActiveDirectoryBackup, ActiveDirectoryInfoToStore 2 elements Computer Configuration › Administrative Templates › Windows Components › BitLocker Drive Encryption Go to policy

  20. Use enhanced Boot Configuration Data validation profile

    Value name: OSUseEnhancedBcdProfile, OSBcdAdditionalSecurityCriticalSettings, OSBcdAdditionalExcludedSettings 2 elements Computer Configuration › Administrative Templates › Windows Components › BitLocker Drive Encryption › Operating System Drives Go to policy

Subkeys

Other keys in Microsoft

View all of Microsoft