Bitlocker to Go and deleted computer object

When encrypting a USB drive using Bitlocker to Go and storing the recovery information in AD, where does it get stored? Is it in the computer object like regular Bitlocker? If so, if the computer is retired or the AD computer account is deleted,
do you lose the recovery information for that drive?

Hi,
Backed up BitLocker recovery information is stored in a child object of the computer object. That is, the computer object is the container for a BitLocker recovery object. If you delete a computer object from AD, you will also delete the BitLocker recovery
information, which is a child object.
But you can use AD restore mode to retrieve the deleted object.
If you have any feedback on our support, please click
here
Alex Zhao
TechNet Community Support

Similar Messages

Deleted computer object from SCCM console, so why is it still appearing in SSRS reports?

We recently divested about 400 computers from our network. I got a list of these computers and deleted them from both Active Directory and in the SCCM Console. I know the deletes were successful because when I search via device name in the SCCM console
they no longer show up. Yet when I run one of our inventory reports in SSRS I still see several of the devices that I deleted listed there. I thought SSRS represented a" live view" of the SCCM database. If that's true then how can a computer object
that I deleted in the console still be present in the database? Is there something I'm missing?

Okay you are saying to select from v_R_System_Valid instead of v_R_System in my query and that will automatically filter out items I removed in the console? Okay that sounds like what I want, the only problem is my query is selecting form v_GS_COMPUTER_SYSTEM.
Can I just add "_Valid" to the end of that and achieve the same result?
Update - Yeah no I tried that and it did not work. Clearly I have a very limited understanding of the SQL views. Interestingly enough Torsten I see you posted a linbk on your blog to a new Microsoft article that documents the SQL views in SCCM 2012. Looking
at it now...

Problems deleting computer objects-because of their subordinate objects

We are running a 2008 R2 domain. We have recently removed our techs out of Account Operators because we have read that is best practice. Our techs now have problems deleting computer account objects that have the msmq active directory objects
beneath the computer object. Even if I give the techs full control permissions on those computer objects, they cannot delete them because they cannot delete the msmq subordinate AD objects. The msmq objects are not showing a security tab, like
other subordinate objects do. If I delete the msmq objects with a Domain Admin account, then the techs can delete the computer objects. Any ideas of how I can fix it so they can delete the msmq objects, without being Account Operators?
Thanks,
Dan Heim

Hello,
please see
http://policelli.com/blog/archive/2009/11/06/understanding-adminsdholder-and-protected-groups/ and start with removing the flag for the mentioned accounts. Therefore see "Orphaned AdminSDHolder Objects" in the mentioned article.
Best regards
Meinolf Weber
MVP, MCP, MCTS
Microsoft MVP - Directory Services
My Blog: http://blogs.msmvps.com/MWeber
Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.
Twitter:

Delete Computer object VS Disjoin

Quick question on AD administration to help resolve an internal debate:
We're running AD on Windows Server 2008 R2. One admin states that "deleting doesn't remove all AD objects", and that you need to run a disjoin on the machine first to properly remove the Computer Object. Can anyone confirm this?
Which is the correct way to remove objects in AD?
It's my understanding that no matter what, you'll end up running a delete command, which marks the object as deleted; this gets replicated to all other DC's, and whenever the tombstone lifetime expires, then a cleanup process will finally and forever remove
the tombstone objects. If you don't run a "disjoin" command first, will there be any other lingering objects that need special care and consideration??
Any info is appreciated. Thanks much.

Hi - This is _how_ it works:
A domain unjoin comes down to the NetUnJoinDomain() API call documented at:
http://msdn.microsoft.com/en-us/library/windows/desktop/aa370644(v=vs.85).aspx
There is two scenarios that can happen, either the account get's disabled (by default) if you unjoin using the UI, or it's not disabled leaving out the misnamed flag 'NETSETUP_ACCT_DELETE' that actually means disable and not delete.
The computer account is only disabled regardless of the flag if the user that performs the unjoin has the rights to disable the computer account in AD, e.g write to the userAccountControl attribute.
The computer account (object) in AD is never deleted from AD during a unjoin.
How ever the importance of clean up here is that the computer accounts password is cleared from the LSA during a unjoin, so it can't be used to authenticate against AD in case that the computer account is NOT being disabled for one of the reasons mentioned
above.
Deleting the computer object from AD is like deleting any other object in AD, it stays for the TSL until it's ultimately removed from the database.
Enfo Zipper
Christoffer Andersson – Principal Advisor
http://blogs.chrisse.se - Directory Services Blog

Recover of Deleted Computer Objects

We have AD Recycle Bin enabled in our environment, with Recycle bin enabled we are able to restore the users.
I would like to know how to recover the deleted computers?
I am trying for below command with Administrator. Active Directory powershell
Get-ADComputer -Filter 'CN -eq "{Hostname}'" -IncludeDeletedObjects.
Can you please suggest?
Thanks HA

There are few attributes those are very important before restoration. Like "distinguishedname" , "lastknownparent" & "GUID".
Use below one liner for getting those details.
ldifde -x -d "cn=deleted objects,dc=contoso,dc=com" -f Del_obj.ldf
Open that .ldf file using notepad & search that notepad for that object. You will get all the necessary details. You can restore that using object GUID.
Also you can restore this way.
Restore-ADObject -Identity "CN=bshwjt\0ADEL:dd1812f5-653b-43b3-89f2-aaec8373d29c,CN=Deleted Objects,DC=Contoso,DC=com" -NewName "bshjwt" -TargetPath "OU=TestOU,DC=Contoso,DC=com"
Regards,
Biswajit
MCTS, MCP 2003,MCSA 2003, MCSA:M 2003, CCNA, Enterprise Admin, ITIL F 2011
Blog:
Script Gallary:
LinkedIn:
Note: Disclaimer: This posting is provided & with no warranties or guarantees and confers no rights..

Retreive a Deleted/Recycled Computer Object

I deleted a computer object for a computer that still exists. OOP!
We recently updated our Domain Controllers and brought our DFL and FFL to 2012 R2. I have enabled the recycle bin, but NOT before deleted the computer object. Here is the chronology.
DFL and FFL Server 2003
Update DFL and FFL to Server 2008
Delete Computer Object that I want to get back
Update DFL And FFL to Server 2012 R2
Enable Recycle Bin
Discover that I deleted a Computer object that I really still need
So.. here is what I have done:
Looked in the Active Directory Recycle Bin using ADAM
Followed instructions to try to use ldp.exe to do a tombstone reanimation.
I was able to find the object and its information using ldp.exe in the deleted objects container. It has isDeleted set to True and isRecycled set to true.
I attempted to delete the isDeleted property and modify the distinguished name. This did not seem to work.
I was later reading that it might not be a good idea to do a tombstone reanimation when recycle bin is enabled. These changes fail and of course I still can't get my object back.
Is there hope, what should I do next? I don't want to rejoin the computer to the domain, because I don't know if there are possible references to the SID or some other unique data that is stored in the object I deleted.

> 2. Followed instructions to try to use ldp.exe to do a tombstone
> reanimation.
Grab sysinternals' adrestore - much easier to handle :)
Greetings/Grüße,
Martin
Mal ein
gutes Buch über GPOs lesen?
Good or bad GPOs? - my blog…
And if IT bothers me -
coke bottle design refreshment (-:

Archive and delete sap event management objects

Team, I need to configure the archiving objects and residence time to Archive and delete EM objects. there are three steps of configuration, and I have never done this before.
Can any one of you help me in setting up this config and the programs that need to run to archive and delete these objects.
I would really appreciate you help and quick response on this.
Define Archiving-Object-Specific Customizing
Define Residence Times for Archiving or Deleting
Define Settings for Deleting Document Flow
Thank you!!!

Hello Steffen,
I was told that it would be possible to display archived and deleted event handlers using BAPI /SAPTRX/BAPI_EH_GET_DATA_GEN. I tested it, but could not verify this statement. SAP Help reads:
"The archiving object /SAPTRX/A0 only supports a technical view in the Archive Explorer of the Archive Information System. This view is similar to the display in transaction SE16."
It would be great if you could help clarify this. Thank you!
Best regards,
Philiipp

How to identify and delete objects after failure of registering XML schema

Hi,
I have tried to register a XML schema with many global elements but failed.
I have checked the view DBA_XML_SCHEMA and found that there is an entry for this failed XML schema and the disk spaces would not be freed after the failure of registration as well.
I have tried DBMS_XMLSCHEMA.deleteSchema() with DELETE_CASCADE_FORCE but failed with ORA-31000: Resource is not XDB document.
How can I identify and delete the objects for this failed XML schema and free up the disk space ?
I would not prefer to use 'DROP USER ... CASCADE' since there are other objects owned by this user.
Thanks in advance.

you can get them from user_objects.
but you have to identify them manuallly if your schema has other objects other then created by the xml schema creation process.
Note these objects will be cases senistitive. so you should enclose them with double quotes during deletion.

Problem in deleting Proxy Objects

Hi All,
I have deleted the Proxy but the Proxy Objects(Classes, Tables, etc.,) are still not deleted. I tried deleting them in se24/se11 but it says it is to be edited in SPROXY, but it is no longer visible in SPROXY. Is there some way to delete it?
Thanks,
Divya.

Hi Divya,
Do you want to delete complete proxy objects or you want to regenerate it?
If I am not wrong all object get deleted when you delete proxy object. Anyway as suggested you can delete complete package..
If not try to regerate proxy and delete all objects again.
Hope this will help.
Nilesh

Is There A Way To Republish A Report In CMC Without Deleting The Object?

We're using Business Objects Enterprise 11.5 to manage over 700 reports. Right now, whenever a user requests a change to a report (which happens several times a week) we go into CMC and delete the object completely, and create a new one. This seems pretty wasteful.
It seems to me like there should be some "Browse" function somewhere that would allow us to grab an updated .rpt file and replace the current one, but for the life of me I can't find it.

That's a pretty lousy design IMO.
No comment
Crystal Reports needs to connect to the CMS, which by default listens on 6400. You can't force it to use another port, unless the CMS also listens on that port.
As for your IT dept not wanting that port open, the Import Wizard, Publishing Wizard, every client tool needs to connect to the CMS on this port (or the port the CMS listens on).
The gist is that Crystal Reports will have to connect to the CMS on 6400 (in your case).

When I plug in iPhone (5.1.1) to computer, playlists show up on the iPhone (when plugged in), that do not appear when it is not plugged in. And I can't erase them. I have iTunes match, and deleted all my music on the iPhone, but that had no effect.

When I plug in iPhone (5.1.1) to computer, playlists show up on the iPhone (when plugged in), that do not appear when it is not plugged in. And I can't erase them. I have iTunes match, and deleted all my music on the iPhone, but that had no effect on the phantom playlist that shows up on the PC when I plug in the iPhone to the PC. I cannot manually move songs or playlists from the PC to the iPhone
Help greatly appreciated.

Unplug your Iphone out of your computer and replug it back in. It took me several times before I could do this

TS4002 When I use my iphone to check my email, and delete unwanted email, it still shows up on my computer~ and vice versa. How do I get the doubling up to stop??

It used to work just fine, but now whenever I receive email if I check it from my phone and delete it, it will still be on my computer. If I check it on my computer, when I get on my phone, it's still there. I'm having to go through email and delete it all, on both devices, rather than just on one.
How can I make it so that when an email is deleted from one device, it will also be deleted from the other? I don't know what I did to make it stop doing this, and I've tried several things, on both my phone and my mac, but it's about to drive me crazy!
Thanks for any help you can give!

But the problem is, that it Did used to do this. It synced for a year and a half and now only in the past four months has it not synced...
Any thoughts?

I have an ipod and an iphone. I would like to use both devices for my work and home computer. But it tells me that its installed to another library and will delete all items to sync to itunes. Is there a way to do this without deleting?

OK....... I have an Ipod and an Iphone. Would like all the Movies and music i have on both. My computer broke and now the only music i have is on ipod. It wont let me transfer to itunes. It says this device is linked to a different library and if i want to sync to a new one and delete everything on it. UH....NO Is there a way to do this without deleting ? All purchases were made though the same apple id.

- An iPod can only sync with one iTunes library. Yu can however manage music and videos among different computers by:
Using iPhone, iPad, or iPod with multiple computers
- To change syncing computer, move all the media to compute r#2
- Connect the iPod to #2 and make a backup by right clicking on the iPod under Devices in iTunes and select Back Up
- Restore the iPod from that backup
Note tha the iPod backup the iTunes makes does not include synced media like apps and music.

HT4847 My iCloud storage is almost full so I save my pictures to my computer and deleted about 500 for my phone and my iCloud hasn't budged. What can I do?

My iCloud storage is almost full. I saved my pictures to my computer and deleted about 500 from my phone. My iCloud storage didn't move at all, it still says it's almost full. What can I do?

settings>icloud>storage and backup>manage backup and turn off Addtional apps and camera roll

I need to know how to delete the most recent version of Firefox. I JUST downloaded it tonight and my computer doesn't have that little edit bar to work with so I can download the proper Adobe player and my internet has been screwed up ever since I downlo

I need to know how to delete the most recent version of Firefox. I JUST downloaded it tonight and my computer doesn't have that little edit bar to work with so I can download the proper Adobe player and my internet has been screwed up ever since I downloaded the new version of Firefox. I just want the old version of it back since I apparently can't download the Adobe stuff that is necessary to keep my computer safe from Hackers. It sure would have been nice to know there was an issue with the new Firefox Update BEFORE I uploaded it. I have Vista which is usually an issue with both Adobe and Firefox. I don't seem to be able to run much of Adobe at all on my computer because of the Vista.
== This happened ==
Every time Firefox opened

I have also noticed all my settings won't stay set, example....I removed the check mark from "third party cookies", the when I close Firefox and reopen the check mark is back, also my tool bar has screwed up....can't reset, been having trouble the up grade.

Bitlocker to Go and deleted computer object

Similar Messages

Maybe you are looking for