Giving Remote Help to Full Disk Encryption Users

Use this challenge/response procedure to give access to users who are locked out of their Full Disk Encryption protected computers.

  1. Go to the Computer Management view > Full Disk Encryption > Remote Help.

    The Full Disk Encryption Remote Help window opens.

  2. Search for the locked computer.
  3. Select the applicable user from the list.
  4. Select the type of assistance the end-user needs.

    • One-Time Logon - Gives access as an assumed identity for one session without resetting the password.

    • Remote Password change - Resets the user's password. This option is for users who have forgotten their fixed passwords.

    • Pre-Boot Bypass Remote Help - Provides One-Time Logon assistance for computers that are configured to disable pre-boot, and uses the option to give remote help without pre-boot user.

  5. Tell the user to enter the Response one text string in the Remote Help window on the locked computer.

    The endpoint computer shows a challenge code.

  6. In the Challenge (from user) field, enter the challenge code that the user gives you.
  7. Click Generate Response.

    Remote Help authenticates the challenge code and generates a response code.

  8. Tell the user to enter the Response Two (to user) text string in the Remote Help window on the locked computer.
  9. Make sure that the user changes the password or has one-time access to the computer before ending the Remote Help session.