Archives
-
Categories
-
Recent Posts
- Getting started with Azure Key Vault
- Windows 11 has blank icons on the taskbar ? try this fix
- Updating the Windows app to the latest version
- Confused about Microsoft 365, Office 365, Enterprise Mobility + Security, and Windows 11 Subscriptions ?
- Getting more out of Windows 365 – Securing your Windows 365 PC’s
-
Recent Comments
- ncbrady on Fixing: “Total identified Windows installations: 0”
- Blake S on Fixing: “Total identified Windows installations: 0”
- ncbrady on Fixing: “Total identified Windows installations: 0”
- Blake S on Fixing: “Total identified Windows installations: 0”
- Christian O'Connor on Fixing: “Total identified Windows installations: 0”
-
-
Meta
Category Archives: 1910
What to do when Endpoint Manager upgrades don’t go as planned. Hint: logs
Introduction Anyone that spends time with ConfigMgr knows that it’s an amazingly resilient product, and not only that, upgrades tend to go without a hitch. I needed to upgrade one of my old labs to test new functionality, but when … Continue reading
Posted in 1910, 2006, detach database, SQL Server 2017
Leave a comment
Troubleshooting BitLocker Management in ConfigMgr – Part 1. Server side
Introduction Microsoft blogged about Bitlocker Management capabilities back in May, 2019. They detailed how that would impact and evolve on the following three platforms. Cloud-based BitLocker management using Microsoft Intune On-premises BitLocker management using System Center Configuration Manager … Continue reading
Fixing an evaluation version of SSRS with “HTTP Error 503. The Service is unavailable”
Introduction I was writing a blog post about Troubleshooting BitLocker Management in ConfigMgr 2002 Current Branch and one of the things I was trying to do was install the web portals, but I was seeing errors shown below. Get-ReportServiceUri : … Continue reading
Posted in 2002, BitLocker Management, Reporting
Leave a comment
How can we utilize the Bitlocker Management feature during OSD with Endpoint Manager
Introduction I’ve had a lot of questions recently about people wanting to use the new BitLocker Management capabilities in Configuration Manager, and to make use of those abilities during OSD (Operating System Deployment). First things we need to keep in … Continue reading
Posted in 1910, 2002, 2006, BitLocker Management, Full Disk Encryption, MBAM, pki
Leave a comment
Full disk encryption (in ConfigMgr 1910) – a closer look using real hardware
Introduction In an earlier post I showed you how you can enable Full Disk Encryption via a task sequence in Microsoft Endpoint Manager Configuration Manager version 1910. The screenshots in that blog post were taken from virtual machines, and I … Continue reading
Posted in 1910, BitLocker, Full Disk Encryption
6 Comments
Learn about Bitlocker Management in Microsoft Endpoint Configuration Manager version 1910 – part 9 Group Policy
Introduction In this video (scroll down to the bottom of this post) I show you how you can obtain the MDOP ADMX templates for use within Active Directory Group Policy. I show you where to download the MDOP templates from, … Continue reading
Posted in 1910, ADMX, ADMX Templates, MBAM
Leave a comment
Learn about Bitlocker Management in Microsoft Endpoint Configuration Manager version 1910 – part 8 Migration
Introduction In this video (linked at the bottom of this post) I show you how you can migrate existing MBAM managed clients to Configuration Manager using the new BitLocker Management feature that was released in Microsoft Endpoint Configuration Manager version … Continue reading
Posted in 1910, MBAM, Migration
6 Comments
Enabling Full Disk Encryption in Microsoft Endpoint Configuration Manager 1910 in a task sequence
Introduction Microsoft Endpoint Configuration Manager 1910 came with BitLocker management capabilities (MBAM features), and this fits together nicely with task sequence steps regarding BitLocker. The option to enable Full Disk Encryption actually started with Configuration Manager 1806 but MBAM integration … Continue reading
Posted in 1910, BitLocker, Full Disk Encryption
12 Comments
Learn about Bitlocker Management in Microsoft Endpoint Configuration Manager version 1910 – part 7 Reporting and compliance
Introduction In this video I show you how you use the built in reports from the BitLocker Management feature that was released in Microsoft Endpoint Configuration Manager version 1910. I explain what each of the 5 built in reports offer … Continue reading
Posted in 1910, MBAM, Reporting
Leave a comment
Learn about Bitlocker Management in Microsoft Endpoint Configuration Manager version 1910 – part 6 forcing decryption
Introduction In this video I show you how you can enforce decryption of BitLocker encrypted drives in Microsoft Endpoint Configuration Manager version 1910. It involves the use of a custom Configuration Baseline with a Configuration Item to set a registry … Continue reading
Posted in 1910, MBAM
Leave a comment
Learn about Bitlocker Management in Microsoft Endpoint Configuration Manager version 1910 – part 5 key rotation
Introduction In this video I show you how key rotation works when a key has been revealed via the helpdesk using Bitlocker Management integrated as a feature in Microsoft Endpoint Configuration Manager version 1910. To see a list of all … Continue reading
Posted in 1910, key rotation, MBAM
Leave a comment
Learn about Bitlocker Management in Microsoft Endpoint Configuration Manager version 1910 – part 4 Enforce encryption
Introduction In this video I show you how to enforce encryption with no user interaction using Bitlocker Management in Configuration Manager 1910 (and a compliance baseline containing a configuration item with 2 registry keys). Below are the key path and … Continue reading
Posted in 1910, MBAM
Leave a comment
Learn about Bitlocker Management in Microsoft Endpoint Configuration Manager version 1910 – part 3 customize the portals
Introduction In this video I show you how to customize the self service portal to suit your organization, and I show you how you can change what a person see’s in the help desk based on which Active Directory Security … Continue reading
Posted in 1910, MBAM, self service
Leave a comment
Learn about Bitlocker Management in Microsoft Endpoint Configuration Manager version 1910 – Part 2, configure portals
Introduction In this video I show you what you need to know to get the Bitlocker Management (formally MBAM) web site portals working in Microsoft Endpoint Configuration Manager version 1910, please check it out. Install the MBAM portals – https://docs.microsoft.com/en-us/configmgr/protect/deploy-use/bitlocker/setup-websites … Continue reading
Posted in 1910, MBAM, MBAM, pki
Leave a comment
Learn about Bitlocker Management in Microsoft Endpoint Configuration Manager version 1910
Introduction I’ve created a video showing you what you need to know to get Bitlocker Management (formally MBAM) integration working in Microsoft Endpoint Configuration Manager version 1910, please check it out. for more info and links to setting up PKI … Continue reading