run .bat file to unlock bitlocker drive BEFORE user login

[gowanus]

Folks,

Many hours of googling have not yet yielded a solution...

I have a .bat file that requests input of the PIN to unlock a bitlocker encrypted partition.
I would like to run this before windows LOGON (ask for password during boot).
This is because I placed several of the user directories (desktop etc) onto that partition.
If I do not unlock the drive before login, desktop does not load, and other startup programs (e.g., dropbox, skydrive) cannot access their folders and fail.

I have tried scheduling a task at start up, without success.
The bat file needs to be run as administrator - but even when I indicate "run with highest privilege" it won't run properly.

I have basic knowledge or task scheduler, cmd line, and registry editing (BASIC knowledge...).
So any help you can provide (with details) would be much appreciated!

Gowanus

 

[benjy206]

Hi gowanus and welcome to Seven Forums.

Here of MS site they have something it's for windows 2000 but might help in what you need How to Run a Batch File Before Logging on to Your Computer

 

[benjy206]

ah found something else also:
Use the Group policy editor.
%systemroot%\system32\gpedit.msc

User Config\Windows Settings\Scripts\Logon/Logoff
Computer Config\Windows Settings\Scripts\Startup/Shutdown


So basically go to group policy by typing in the search bar "gpedit.msc" then the following path "computer config\windows settings\ scripts\ startup/shutdown

 

[gowanus]

So basically go to group policy by typing in the search bar "gpedit.msc" then the following path "computer config\windows settings\ scripts\ startup/shutdown

Thanks for trying to help.
I have been fiddling around with that for quite a while - no luck.
Script does not seem to run - neither at startup or logon.

I disables UAC just in case.
BTW, script rund fine when double clicked directly.
It really isn't that complicated:

"
@echo off
manage-bde D: -unlock -password
pause
"

Any additional help is appreciated.
Gowanus

 

[benjy206]

Hmm I will keep looking other than that I can't answer at the moment maybe someone might be nice enough to jump in. But will get back to you

 

[benjy206]

Ok after this I'm all out of ideas

How To Create a User-Defined Service

I know it says you can't create batch file but if you read here http://www.tomshardware.co.uk/forum/35059-45-batch-file-windows-loads

 

[gowanus]

Could not get any of this to work. Thanks a lot for trying, though.
If anyone else comes up with a usable approach for unlocking bitlocker (non so partition) before login, please let me know.
Thanks!

 

[RicardoBohner]

Why don't you disable bitlocker on the partition\s users should have access. What is the point of encrypting it if the encryption shoud be gone befor the user logs on. I think the point of using bitlocker is so users must provide a password when they access a certain drive...

 

[RicardoBohner]

What accont have you used to run the schedlued task, have you tried the system account?