Lets domain-joined servers reboot without anyone typing a PIN: when they're on a trusted wired network, a WDS server holding the Network Unlock certificate unlocks the system drive.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains BitLocker Network Unlock in context, with comparison tables and the common traps.
Terms in this definition
- PIN
A brief secret code. The Windows Hello for Business kind is bound to a single machine and protected by its TPM, which means it stays put rather than travelling like a password does. App protection policies may additionally ask for a separate app-level code.
- Windows Deployment Services
A Windows Server role for installing operating systems over PXE network boot. It also serves BitLocker Network Unlock, and part of its boot.wim image capability has been deprecated.
- Network Unlock
With this BitLocker capability, domain-joined machines secured by TPM plus PIN can boot without the PIN when connected by cable inside the company. A certificate and a WDS server running Network Unlock are prerequisites.
- Certificate
Key Vault object holding an X.509 certificate, whose associated key and secret are managed alongside it.
- Chat message roles
Labels on chat messages: instructions go under system, the person's input under user, the model's previous answers under assistant, and results returned by a called tool under tool (or function).
Related terms
- PXE
Lets a machine start up over the network. Windows Deployment Services depends on it, as does BitLocker Network Unlock.