Create bitlocker partition using k1000 script

I'm having trouble getting the bdedhcfg.exe to run via k1000 script. I've tried as a "launch program" "run batch". I've tried making a vb script and calling the script as a dependency.

Basically I've been able to us HP bios config to turn on the TPM without a prompt and use a vb script that takes ownership of the tpm and turns on bitlocker.  I just can't seem to get a partition generated via kace. I can run my batch files from the pc, but when I script it in kace it fails "bdehdcfg is not a valid cmdlet".  I've set up these scripts the same way I used the hpbiosconfig.exe or a simple shutdown through cmd.

Any reccomended partition solutions?

0 Comments   [ + ] Show comments

Answers (1)

Posted by: jknox 8 years ago
Red Belt

What user permissions are you running the batch script under when you run it locally? I'd guess you would have to be an administrator to run those commands and by default the K1000 runs scripts as LocalSystem.  You would need to use the "run as" feature of an online Kscript to run it as admin.

Do you give the K1000 full file paths when you run it from there?  I've seen some instances where the batch file couldn't determine file locations and would error out.

  • I've tried changing permissions and using complete file paths. Trying to do it with diskpart.exe and cant seem to get to work either. It reads launching diskpart, but doesnt read the txt file script I've added as a dependency. I specified the location and parameters like this:
    parameters: /s $(KACE_DEPENDENCY_DIR)\bitlockerpartition.txt > c:\diskpartlog.txt - joe_nismo 8 years ago
  • I was able to get it to work as a batch file.. in k1000. I realized I was using the batch file in k1000 to call a batch file in the dependency... and launching as a program didn't work. So it looks like choosing "run a batch file" and type c:\windows\system32\diskpart.exe /s bitlockerpartition.txt > c:\diskpartlog.txt
    and have bitlockerpartition.txt as a dependency worked!! THanks - joe_nismo 8 years ago
    • You might consider writing a blog here on your script. Others might find that useful. - jknox 8 years ago
      • Well I ran into one more snag. Diskpart does not have a method of putting the boot info bitlocker requires on the partition. bdehdcfg.exe does place this info on the partition.... I will continue to work with Diskpart and see if there is a way to place that boot into on the partition or get bdehdcfg.exe working through kace... Once I have this finished I will blog the script. - joe_nismo 8 years ago

Don't be a Stranger!

Sign up today to participate, stay informed, earn points and establish a reputation for yourself!

Sign up! or login


This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ