On-premises BitLocker management using System Center Configuration Manager

[Thomas123]

On 4/28/2020 at 9:44 AM, anyweb said:

great, looks like you've solved it !

Not really, I cannot set up auto-unlock for fixed drive. I  installed Hot Fix to 1910 and there is still same problem. Also update to 2002 is not visible in my tenant (is that normal?). There is no alert on MBAM log on client site, there is no alert on SCCM site, currently workstation is Compilant. Any ideas what should I do except update sccm to 2002 (does it stable version?)

[anyweb]

2002 won't show up unless you use the early update ring script, or wait for it to release to slow ring (soon)

 

https://docs.microsoft.com/en-us/mem/configmgr/core/servers/manage/checklist-for-installing-update-2002#early-update-ring

[Mripra]

Anyweb, Thanks for making my life easy.

I do have one question.

Step 5. 

That MBAM popup ...we want to deploy it without that popup like no user interaction and it just run in the background without user to click in start. Is that possible? 

 

[anyweb]

yes its possible, if you are using SCCM 1910 follow my video

 

if you are using MEM 2002 then set the corresponding settings in the wizard to have no delay

[Jonathan7]

Hi,

My Internet Clients (IBCM) don't find the Recovery Service MP. In that case , I need an additional configuration?

[Pierre-Paul]

I was wondering, I'm currently deploying Bitlocker on computers that are connected through VPN.  Is there a way to not show the MBAM prompt and force the system to encrypt?

Thanks!

[Pierre-Paul]

Ohh never mind, I read your orginal post.  Thanks!

[anyweb]

yup, for anyone wondering, in part 4 of my series you'll see how to do this silently,

 

https://www.niallbrady.com/2019/11/13/want-to-learn-about-the-new-bitlocker-management-in-microsoft-endpoint-manager-configuration-manager/

[Pierre-Paul]

The only thing I need to decide is wether we store the recovery  key in SCCM or the Active Directory.  Does it really make a difference where it's stored?

[Thomas123]

FYI on 2002 version (official since 11.05.2020) everything looks good! I needed to configure Auto-Unlock option and disable password requirement (in 1908 version this tab wasn't available). Now, after encrypted C:\ I got prompt to encrypt also D:\ but without any PIN.