1.2.4.2.3.9 Set 'Allow data recovery agent' to 'True'

Information

This policy setting allows you to control how BitLocker-protected removable data drives are recovered in the
absence of the required credentials.

Solution

Make sure 'Allow data recovery agent' is set to 'True'

See Also

https://workbench.cisecurity.org/files/17

Item Details

Category: CONTINGENCY PLANNING, SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|CP-10(6), 800-53|SC-28(1), CSCv6|10.3, CSCv6|13.2

Plugin: Windows

Control ID: 4f432afd7436954f028e372e8af2fc4f3128a2cda3c7926e6d2f00cd74a97813