I have answered this question many times now on the Technet forum so I think it is time to write about it here as well.
When installing Windows 7 from the DVD manually the partition needed for Bitlocker is created automatically, when deploying a captured image using SCCM however this has to be created manually.
The easiest way to create the partition required by Bitlocker during OS Deployment is to use the following command in the task sequence.
“BdeHdCfg -target default -quiet”
It will shrink the System partition and create the partition needed for bitlocker. This command must be run when the Windows 7 is installed.
It can also be run after OSD if the decision to use Bitlocker in the organisation is taken after the deployment and roll out of Windows 7 is complete.
If you are deploying Windows 7 X64 the “Disable 64-bit file system redirection” must be checked otherwise it will not work.
A reboot is required after the command is executed to complete the creation process.
5 thoughts on “Create Bitlocker partition during OSD”
I’m thinking of using this idea for a group of machines, but had a quick question.
I originally setup my task sequence following many other posts which all had the same info as the following: (http://blogs.technet.com/b/pauljones/archive/2010/03/08/how-to-enable-bitlocker-with-sccm-osd.aspx in particular)
For some reason, two machines that I installed (they were fresh out the box from Dell) received this successfully, however, once I threw some older machines on I’m now having issues with logical drive letters being assigned to the correct partition. During my sequence, it partitions the first part, calls it C:\, then partitions the second part, and calls it D:\ then puts the OS on D:!!!
Any ideas why this may be happening?
Are the machines you reinstall installed with the OEM installation from Dell? The problem you are having is probably due to the OEM installlation and the partitions it uses. If you test my method in the blogpost it should work just fine for you. Firts removing the partition and then creating it again..
i tried the computer on my existing laptop but it does not work. it still tell me that Bitlocker setup could not finda target system drive. you may need to manually prepare you drive for Bitlocker. can you advise
Did you have the Power adapter connected? BDEHDCFG will not run when on battery.