How to Bypass PGP BootGuard multiple times on a standalone Windows 7 and Windows Server 2008 machine


Article ID: 157429


Updated On:


Symantec Products


This article describes how to bypass PGP BootGuard multiple times when rebooting a computer. This bypass feature can assist administrators who need to install software or make other configuration changes to a remote computer.


1. Create a batch file to by-pass the PGP bootguard screen by following the below mentioned instructions:
a. Launched notepad and typed in the below mentioned PGP Whole Disk Encryption (WDE) commands in it:
cd c:\Program Files (x86)\PGP Corporation\PGP Desktop
pgpwde --add-bypass --disk 0 --passphrase "Passphrase"
b. Saved the notepad file with the extension as .bat and selected the "Save Type As" "All Files"

2. Open Group policy editor by running gpedit.msc

3. Expand Windows Settings under Computer Configuration

4. Click on Scripts

5. Double Click Startup option located on the right hand side of the screen

6. Click Add and browse to the location of the batch file

7. Click ok to save the configuration

Note: The user will get a bootguard screen at the first reboot as the batch file will start executing itself after the first reboot. The user will not get the bootguard screen at the second reboot and onwards. You can also execute the batch file manually by double clicking the batch file

Applies To

Windows 7 (32 and 64 bit) and Windows Server 2008 R2