This document describes the various aspects of deploying BitLocker™ Drive Encryption on computers running Windows® 7 Enterprise or Windows® 7 Ultimate in an organizational environment. This guide is intended for use by a deployment specialist or deployment team. It assumes that you have a good understanding of automated Windows deployment, Active Directory® Domain Services (AD DS) schema extensions, and Group Policy. There is no single recommended method to deploy Windows® 7 with BitLocker, and most deployments of Windows 7 in large organizations differ based on environmental-specific requirements. This guide provides information on the following topics that you should be familiar with when you deploy BitLocker in an organization:
- Getting Started with BitLocker Drive Encryption
- Best Practices for BitLocker in Windows 7
- Planning to Deploy Windows 7 BitLocker Drive Encryption
- Unlocking Removable Drives on Windows XP and Windows Vista
- Backing Up BitLocker and TPM Recovery Information to AD DS
- Using Certificates with BitLocker
- Using Smart Cards with BitLocker
- Using Data Recovery Agents with BitLocker
- Enabling BitLocker by Using the Command Line
- Using the BitLocker Drive Preparation Tool for Windows 7
- Enabling BitLocker by Using a WMI Script
- Auditing BitLocker Deployments
- BitLocker Deployment Guide: Appendices
Read more: Technet