Windows Troubleshooting

Finding a BitLocker Recovery Key in mgmt-3p-cst.auth.tamu.edu

The BitLocker recovery key is used to unlock a Windows device when BitLocker requires recovery authentication. This may occur after certain hardware or firmware changes, security configuration changes, or when Windows cannot automatically unlock the encrypted drive.

Technology Services will need to retrieve the recovery key from TechBox when troubleshooting a device that is prompting for a BitLocker Recovery Key.

1. Enable Required View Options
   • Select View from the menu
   • Make sure the following options are selected:
     • Users, Contacts, Groups, and Computers as containers
     • Advanced Features
2. Locate the Device
   • Navigate to the appropriate device in Active Directory
   • Double-click the device to view its available objects and information
3. Locate the BitLocker Recovery Information
   • Look for an object named msFVE-RecoveryInformation
   • Double-click the msFVE-RecoveryInformation
   • The recovery information will display:
     • The date and time the recovery information was created
     • The BitLocker recovery key, displayed with the format {BitLocker Key}
   • Use the recovery key associated with the appropriate date and time when assisting with BitLocker recovery.

Reset Windows Update

Occasionally we have computers that cannot get updates for one reason or another, this tool should fix those issues as they arrive.

tip

The steps below are how we use the remediation tool to fix computers that are having issues updating

1. Run PowerShell as Administrator
2. Copy the script file to the desktop and navigate to the desktop using PowerShell
3. Run the following command (In the PowerShell window):

Set-ExecutionPolicy -Scope Process Bypass

4. Type the following line:

.\WinUpdate_Remediation.ps1

5. In the popup that appears you should click on Select all
6. After selecting the tasks to be run, Press the green Start button

7. There will be a new popup asking if you want to contine, Press Yes. The operation(s) should take ~8 minutes.

8. After the tasks have finished running there will be another popup asking to reboot the computer. Click yes.

9. After the reboot is finished run all applicable updates for both Windows and the Manufacturer (Dell/Lenovo)