Our others are Windows Server 2016, without fail. If I remember correctly, that is to soon come to an end. Some of our servers (not all of them are physical) are running Windows Server 2012 R2. Greetings Spiceheads,I require a bit of advice, please. How can I upgrade Windows Servers? Windows.Anyhow, what else was I going to do with a day off? On This Day – Ma. Spark! Pro Series - 23rd March 2023 Spiceworks OriginalsĪ stand-in Spark! today, covering for the overworked and underpaid jimender2 who is up to his knees in far flung servers and is therefore unable to enlighten us with usual erudition.They'd simply cut off your fingers or hurt your friends until you remember the password. Then again, most nation state actors and high-level criminals would probably not bother with defeating the cryptography in your device. It would surprise nobody if they had convinced Microsoft to include some backdoor or weakening of the cryptography used or if they knew of a way to unlock the recovery key from the TPM or could simply 'convince' your AD admin to give them the key stored there.Īgainst Mossad, FSB, the like, you are somewhere inbetween and should make your own decision. The primary weakness is the recovery key stored in both AD and the TPM chip - but if your attacker has only the USB stick, those don't apply.Īs often, the question cannot be answered with a yes/no answer without knowing your threat model - who do you want to protect yourself against?Īgainst common cybercriminals, Bitlocker can be assumed secure at this time, at least we know of no attack on a USB stick that is practical.Īgainst the NSA I wouldn't trust Bitlocker. There are several possible attacks on Bitlocker, and apparently a software is available to the police that supports recovery of the password (but requires sniffing the RAM while the device is mounted and unencrypted).

Bitlocker usb drive