Hi, I've got the MBAM with SQL. On the Client (Win 7 64bit) I installed the MBAM Client, which has encripted these machine. I see the Recovery Key in AD. But, I would like to see it in MBAM Drive Recovery. When I pull down the data (User domain, User ID, Key ID, Reason for Drive Unlock), I receive the error "User is not valid for this drive". Why? ---------- This is just the test lab. I use only 2 accounts, which belongs to "Domain Admins" group.

when we install MBAM, on server under local groups we create MBAM Groups. if you have logged in with MBAM system admin account, then you do not have to supply user domain and user id. if you have logged in with MBAM helpdesk account, you have to supply all - User domain, User ID, Key ID, Reason for Drive Unlock Now after you enable bitlocker on volume, did the user logged in to the machine? if No, you will receive the error "user is not valid for this drive"Manoj Sehgal

"if you have logged in with MBAM system admin account, then you do not have to supply user domain and user id." >> yep, it's true. Thank you. ------------- "Now after you enable bitlocker on volume, did the user logged in to the machine?" >> No, I did it only as an admin. Thank you.

when we install MBAM, on server under local groups we create MBAM Groups. if you have logged in with MBAM system admin account, then you do not have to supply user domain and user id. if you have logged in with MBAM helpdesk account, you have to supply all - User domain, User ID, Key ID, Reason for Drive Unlock Now after you enable bitlocker on volume, did the user logged in to the machine? if No, you will receive the error "user is not valid for this drive" Manoj Sehgal Hi Manoj, how can a "normal" helpdesk user (not member of "Advanced Helpdesk Users") get the recover key of a client when he don't know which user has set (or changed) the pin. We have clients which are used by several users. If the PIN of such a machine is lost, how it is possible to get recovery?