MBAM Bitlocker encryption befor Logon

[MarciaL]

actually i made a task sequence for MBAM to encrypt all drives - it starts only, when i´m login to Windows 10, but i need it while the tasksequence is running, before starting installing Office 365 and so on. Have anyone experience for this step?

the mbam-client config (last step) set the registry for "no delay" and the mbam-client-Trigger -> reg.exe ADD HKLM\Software\Microsoft\Windows\CurrentVersion\Run /t REG_SZ /v TriggerMBAM /d "%ProgramFiles%\Microsoft\MDOP MBAM\MBAMClientUI.exe" /f

will not run, have tried on different places in the tasksequence, but nothing worked ... is it in generall possible to start the encryption while running the "Installation" ... Thx for your help.

[Jorgen Nilsson]

Hi,

You need to use the Invoke-MbamClientDeployment.ps1 which is provided by Microsoft to start the encryption from the Task Sequence..

More informaton: https://docs.microsoft.com/en-us/microsoft-desktop-optimization-pack/mbam-v25/how-to-enable-bitlocker-by-using-mbam-as-part-of-a-windows-deploymentmbam-25

Regards,
Jörgen

[MarciaL]

Hi Jorgen,

thx for this. With Win10 1703 i tried, but nothing happend. This step can be added after installing Win10 in the task Sequenz, for my understanding ....

will try it again and give a result

 

Regards,

Marcus

[Jorgen Nilsson]

Hi,

Yes it should be added after starting the computer with the newly deployed OS.

Regards,
Jörgen