Mripra

So after doing more testing found out that its the VPN issue. My test machine even the laptops when they go to office network the keys get populates and encryption starts Silently. Now the question is why it don't get populated when its connected to VPN even after it try check in with SCCM server once connected?

sry.. I posted in my edited reply...one above. https://prnt.sc/sjx7f3

5-20-20 So after looking at the log BitlockerManagement_GroupPolicyHandler I saw its try to inject registry keys. See the screen shot below. http://prntscr.com/skckgu But when I check registry are not there. Any idea? Hope I am making sense.

May be is this what you mean? : http://prntscr.com/sjx7f3 Yes I do.

FVE only has MDOP folder. I have the latest ConfigMagr Client. Also my laptop is in the correct collection.

Yes it is. agent: http://prntscr.com/sjqbkx FVE Key: only sccm enfore baseline from the Part 4. : http://prntscr.com/sjqee1

Hi Niall, Thank you, I deployed it to 10 test units over the VPN. Only 1 so far worked as intended. Few Question. - I can see in my BitlockerMangaement GroupPolicyHandler that its trying to enforce keys into registry. But I am not seeing them other then those 2 custom one enforce using baselines. Is there way for it get force more frequently? Screen Shot I will be updating SCCM to 2002 soon too.

Anyweb, Thanks for making my life easy. I do have one question. Step 5. That MBAM popup ...we want to deploy it without that popup like no user interaction and it just run in the background without user to click in start. Is that possible?