MBAM Appears to have Installed but not working

[cfreeman21]

Removed Mounted ISO and doesn't seem to have changed status, on reboot I do get this prompt.

[anyweb]

well you didn't get that prompt before so i think that's a step forward,

how have you configured this ?

 

To force encryption without intervention you must set the Encryption Policy Enforcement Settings to Enabled and set the non compliance grace period (days) to 0 if you want it to start as soon as possible

[cfreeman21]

I have the same settings that you have here and I was actually getting that prompt before removing the ISO.  ?

Almost feels like you needed to have Bitlocker MBAM in place pre-2103 to get this functioning.

[anyweb]

there must be something missing, how are you connecting to the VM exactly ? are you RDP'ing to it (don't do that) or connecting to it from within the hyperv host

secondly, have you tried creating a brand new vm with a virtual TPM (and no iso mounted) to see does it behave differently

and lastly, don't use the section highlighted here (set it to disabled), this is for pre-Windows 10 operating systems...

 

[cfreeman21]

Turned off the Windows 7 settings as requested, built a brand new Windows 10 21H2 virtual workstation and I connect to the machines from Hyper-V Conolse as below.

[anyweb]

and this is using e-http instead of PKI ? is everything else working fine in this environment eg: deployment of applications to the client ?

[cfreeman21]

Yes e-http and yes everything else is working fine haven't made any applications in the lab but patches deploy.  Also finally my I am getting a bit of logging on the web server.

[anyweb]

i'll get one of my labs up to 2203 without bitlocker management, and try testing this...

[cfreeman21]

Thanks, let me know if you need anything from me and or if we want to sync up and look at my lab together.

[cfreeman21]

Any luck or getting same results as me?