Can A SysAdmin Decrypt Bitlocker To Go?

[Daddyman]

At work we have Windows 7 Enterprise, and I would like to use Bitlocker To Go (BTG) to encrypt my USB ('flash') drive. The purpose is to prevent anybody - including system administrators - from viewing the contents of my USB drive.

Can a system administrator decrypt a BTG-protected USB drive without knowing the password? Can a system administrator simply turn off BTG on my USB drive?

 

[Daddyman]

I discovered that it is possible for a system administrator to decrypt a USB drive encrypted by Bitlocker-To-Go.

When a user encrypts a USB drive with BTG, the user is asked how they would like to generate a recovery key: by printing or storing in a file.

If so enabled in Group Policy, Windows will store a copy of the recovery key in a location accessible to a system administrator.

This isn't so unreasonable when you understand that BTG was created so enterprises can protect their data from falling into unauthorized hands. BTG is provided as a tool that enterprises can either offer or mandate to employers. It makes sense that the enterprise should have way to recover their own data when it is stored on an employee's USB drive.

So for my purposes, Bitlocker-To-Go is unsatisfactory.

 

[logicearth]

It would work to your satisfaction if you did it at home on your own computer. But I question the purpose of this. Sounds like you might be up to no good concerning your employer.

 

[Daddyman]

Surely you didn't become a Gold Member for posts like that.

 

[logicearth]

Like what? Telling you that it would work to your satisfaction if you did it from home?

 

[Layback Bear]

Well I'm a Gold member and the answer to your question is very simple. It is inappropriate to do what you want on a company computer without the proper permission from the the owner/operator/administrator/IT department. You can of course do such things on your own computer at home or any other place you choose to use your computer. Daddyman being polite to other members is always appreciated on this Forum.

 

[Daddyman]

Daddyman being polite to other members is always appreciated on this Forum.

That concept appears to have been forgotten by logicearth. I didn't come here to be accused by my fellow posters.

 

[logicearth]

Being polite does not prevent one from voicing opinions. Or as you put it "accusing" you of some action.

 

[Daddyman]

<placed in Ignore list>