Introduction

In this video I show you how you can enforce decryption of BitLocker encrypted drives in Microsoft Endpoint Configuration Manager version 1910. It involves the use of a custom Configuration Baseline with a Configuration Item to set a registry key.

This is part 6 from a 10 part video series on youtube.

• BitLocker management – Part 1 Initial setup
• BitLocker management – Part 2 Deploy portals
• BitLocker management – Part 3 Customize portals
• BitLocker management – Part 4 Force encryption with no user action
• BitLocker management – Part 5 key rotation
• BitLocker management – Part 6 Force decryption with no user action
• BitLocker management – Part 7 Reporting and compliance
• BitLocker management – Part 8 Migration
• BitLocker management – Part 9 Group Policy settings
• BitLocker management – Part 10 Troubleshooting

For more info about the new Bitlocker Management ability in Configuration Manager 1910 see https://www.niallbrady.com/2019/11/13/want-to-learn-about-the-new-bitlocker-management-in-microsoft-endpoint-manager-configuration-manager/

Take a look !