Audit your Bitlocker implementation by reviewing your Bitlocker Recovery Passwords in your Active Directory and quickly detect machines with missing recovery passwords.

Cobynsoft’s AD Bitlocker Password Audit is a Windows utility for querying your Active Directory for all or selected computer objects and returning their recovery password and volume information in a grid-view format giving you a quick overview of the status of your current password recovery capabilities.

If you have configured your BitLocker Drive Encryption to back up recovery information for BitLocker-protected drives and the Trusted Platform Module (TPM) to Active Directory Domain Services (AD DS) the backed up BitLocker recovery information is stored in a child object of the computer object. That is, the computer object is the container for a BitLocker recovery object. Each BitLocker recovery object includes the recovery password and other recovery information. The recovery password is stored in the msFVE-RecoveryInformation attribute and if you have incorporated this process in your environment you have most likely also installed the Bitlocker Recovery Password Viewer for Active Directory so that you can view the recovery password for selected computer objects. If this is the case, you may also have asked your self the following questions:

• I’ve just implemented Bitlocker, but how do I know that the recovery passwords are being populating for all of my computers?
• How can I identify machines that have problems with the Bitlocker process?
• How can I identify which machines do NOT have a recovery password?

You could answer these questions by opening the properties for each of your computer objects and locating the Bitlocker Password Recovery tab. But, as you can imagine this is a very tedious project for a domain with hundreds or even thousands of computers. This is where the AD Bitlocker Password Audit utility comes in handy.

Supports machines with multiple associated keys including Bitlocker-to-Go.

Quickly find and recover deleted Active Directory objects

Cobynsoft’s AD Object Recovery is a Windows utility for querying your Active Directory for deleted computer, user, group, or other objects and restore them on-the-fly.

• No domain controller downtime – Query, view, and restore Active Directory objects without rebooting the domain controller with Cobynsoft’s AD Object Recovery’s innovative graphical interface.
• Easily restore deleted objects – Reanimate deleted AD objects with Microsoft’s tombstone reanimation feature in Windows Server 2003 and 2008.
• Restore objects with all object attributes intact – If your Active Directory environment have the latest Recycle Bin feature enabled Cobynsoft’s AD Object Recovery is able to restore objects with all of their object attributes intact including the option to restore Bitlocker Recovery Password objects that are associated with a restored computer object.

Temporarily Extend VPN and remote user’s Active Directory password expiration without compromising security

Cobynsoft’s AD Password Extender is a Windows utility that allows you to select a user account and extend the password expiration date by the amount of days specified in your Group Policy. This is often helpful when you have end-users who are travelling and can’t log into the VPN or other Active Directory authenticated system. By extending the expiration you ensure that accounts don’t get compromised from having to communicate the password across insecure channels.

Have you ever gotten the call from the Road Warrior or frequent business traveller saying: “I am on the road and I can’t log into the VPN”? It is a common problem and happens frequently because end-users forget to change their passwords before they leave for that stressful trip. In some cases we break security protocols by asking them for their password and set the password to be the same. In other cases we set a new password, but now the cached laptop password is different from their domain or VPN password causing confusion. In either case we might have compromised the account as others might have overheard the conversation. In some cases, we even say they are out of luck until they return to the office temporarily preventing them from working. This is where the Cobynsoft’s AD Password Extender can help.