Summary
Consider the following scenario:
An administrator edits a Group Policy Object (GPO) using Windows Server 2008 R2 or Windows 7, using the policy editor snap-in for the Microsoft Management Console (MMC.exe). The policy is created to “Require additional authentication at startup” for BitLocker Drive Encryption. The administrator edits the policy, located under the following location:
Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives
Setting: “Require additional authentication at startup”
Options: Allow BitLocker without a compatible TPM
Configure TPM startup: “Do not allow TPM”
While configuring the setting, the administrator maximizes the settings page for the GPO. Once the change is made for “Configure TPM startup”, the administrator saves and closes the page. Opening the setting again will result in the drop-down list to the default entry (first item), which is incorrect.
This is a display issue with the local MMC.exe editor, and the value is properly saved. This display issue can occur with any value that is displayed in a drop-down box, when the settings page is maximized.
To work around the issue, do not maximize the settings page when editing a group policy setting that includes a drop-down selection box.
An administrator edits a Group Policy Object (GPO) using Windows Server 2008 R2 or Windows 7, using the policy editor snap-in for the Microsoft Management Console (MMC.exe). The policy is created to “Require additional authentication at startup” for BitLocker Drive Encryption. The administrator edits the policy, located under the following location:
Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives
Setting: “Require additional authentication at startup”
Options: Allow BitLocker without a compatible TPM
Configure TPM startup: “Do not allow TPM”
While configuring the setting, the administrator maximizes the settings page for the GPO. Once the change is made for “Configure TPM startup”, the administrator saves and closes the page. Opening the setting again will result in the drop-down list to the default entry (first item), which is incorrect.
This is a display issue with the local MMC.exe editor, and the value is properly saved. This display issue can occur with any value that is displayed in a drop-down box, when the settings page is maximized.
To work around the issue, do not maximize the settings page when editing a group policy setting that includes a drop-down selection box.
More Information
This issue is only present when the settings page is opened in the maximized view. If you open the settings page and see the incorrect value displayed, click the "restore down" icon in the upper right-hand corner of the window. This setting will persist, and on subsequent openings will not be maximized.