Windows – Can’t encrypt with bitlocker: “the specified domain either does not exist or could not be contacted”

bitlockerwindows 7

I have encrypted my primary drive with bitlocker (C:) and am looking to encrypt D:\ which is a stand-alone second hard drive. However, I get an error message in the "Bitlocker Drive Encryption (D:) dialogue:

the specified domain either does not exist or could not be contacted" when entering password

Computer is not part of any domain.

Best Answer

From BitLocker Group Policy Reference :

Configure use of passwords on fixed data drives

This policy setting is used to require, allow, or deny the use of passwords with fixed data drives.

When set to Require complexity, a connection to a domain controller is necessary when BitLocker is enabled to validate the complexity the password.

When set to Allow complexity, a connection to a domain controller will be attempted to validate that the complexity adheres to the rules set by the policy. However, if no domain controllers are found, the password will still be accepted regardless of the actual password complexity and the drive will be encrypted by using that password as a protector.

When set to Do not allow complexity, no password complexity validation will be done.

The procedure to verify this setting is as follows :

  1. Click Start, type gpedit.msc in the Start Search box and press Enter.
  2. The relevant BitLocker Group Policy settings can be found under :
    Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Fixed Data Drives.
  3. Double-click Configure use of passwords for removable data drives.
  4. Ensure that it is set to either Not configured or Disabled.
    If set to Enabled, ensure that the drop-box below is set to either Do not allow complexity or Allow complexity.
  5. Click OK.
Related Question