2 ms·
> an you not just image the harddrive to a backup (While its running) The disk contents are fully encrypted, and Windows will only boot when the system is in a
by discreditable 12y ago
> an you not just image the harddrive to a backup (While its running)
The disk contents are fully encrypted, and Windows will only boot when the system is in an untampered state (via TPM unlock). A student would have to compromise Windows in a way that escalates their privileges. From there they could turn BitLocker off if they liked. This is far from impossible, but we also use AppLocker to prevent students from running any software that has not be explicitly approved--so they would have to compromise some software which is already installed. I won't delude myself and say it's impossible to compromise all of this, but for my goal of keeping 13-18 year-olds from resetting the local admin password it is quite sufficient.