Introduction In this video I show you how key rotation works when a key has been revealed via the helpdesk using Bitlocker Management integrated as a feature in Microsoft Endpoint Configuration Manager version 1910. To see a list of all the videos in this series click below: BitLocker management – Part 1 Initial setup BitLocker management – Part 2 Deploy portals BitLocker management – Part 3 Customize portals BitLocker management – P

Introduction In this video I show you how you can enforce decryption of BitLocker encrypted drives in Microsoft Endpoint Configuration Manager version 1910. It involves the use of a custom Configuration Baseline with a Configuration Item to set a registry key. This is part 6 from a 10 part video series on youtube. BitLocker management – Part 1 Initial setup BitLocker management – Part 2 Deploy portals BitLocker managemen

Introduction In this video I show you how you use the built in reports from the BitLocker Management feature that was released in Microsoft Endpoint Configuration Manager version 1910. I explain what each of the 5 built in reports offer and take a look at compliance both on the server and on the client including deciphering the statemessage.log. Note: You do not need SSRS to be in HTTPS mode for rendering or using reports about BitLocker Management in Configurat

Introduction In this video (linked at the bottom of this post) I show you how you can migrate existing MBAM managed clients to Configuration Manager using the new BitLocker Management feature that was released in Microsoft Endpoint Configuration Manager version 1910. In order for this to work you’ll need an existing MBAM standalone server(s) that is managing one or more clients. The recovery keys (and associated data) will be stored on that MBAM server as defined by the Gro

Hello this should be a simple question for a gurus like you guys I am pushing an updates at a specific time, they show up in software center fine. after dead line is reached Status Changes to Past due - Will be installed. How long before automatic installation will start the install process? Is there any way to speed up start of the installation after that message comes up?

Hello, I have what might be a simple question however i am not finding an answer anywhere. I am tasked with doing the following. Reboot computers in the collection at a specific time. (I am able to do that via simple package that contain one line command to reboot them) This works fine if the computers are on the network and are online. But quite a few of our employees work from home over the weekend so therefore computers are not in the office. I am rebooting computers at 7 am Monday,

Hi, I am using SCCM 1902 and we recently implemented Infoblox and now I cannot deploy any Operating System. The Option 66 and 67 are active, but I asked the Network team to replace it with IP Helper address that point to the DPs, however they don't know how to do it either. I have several images and Task Sequences for different versions of Windows on all the DPs, but the clients are not picking them up. When I try to PXE boot a client, it gives me a DHCP address, Gateway, and the

Hello, I installed MBAM on my SCCM server without problem. Everything works properly locally. I deployed a server in DMZ to be able to manage my clients on the internet. When I deploy Bitlocker via the local everything works, I have the Bitlocker window that opens to activate it. When I deploy bitlocker on a computer located on the internet, I have no window that opens and I have this in the logs: Unable to find suitable Recovery Service MP I use SCCM 1910 Th