Category Archives: MBAM

Troubleshooting BitLocker Management in ConfigMgr – Part 1. Server side

Posted on September 15, 2020 by ncbrady

Introduction Microsoft blogged about Bitlocker Management capabilities back in May, 2019. They detailed how that would impact and evolve on the following three platforms.     Cloud-based BitLocker management using Microsoft Intune     On-premises BitLocker management using System Center Configuration Manager … Continue reading →

Posted in 1910, 2002, BitLocker Management, MBAM, pki, System Center Configuration Manager (Current Branch) | Leave a comment

How can we utilize the Bitlocker Management feature during OSD with Endpoint Manager

Posted on August 29, 2020 by ncbrady

Introduction I’ve had a lot of questions recently about people wanting to use the new BitLocker Management capabilities in Configuration Manager, and to make use of those abilities during OSD (Operating System Deployment). First things we need to keep in … Continue reading →

Posted in 1910, 2002, 2006, BitLocker Management, Full Disk Encryption, MBAM, pki | Leave a comment

Learn about Bitlocker Management in Microsoft Endpoint Configuration Manager version 1910 – part 9 Group Policy

Posted on February 13, 2020 by ncbrady

Introduction In this video (scroll down to the bottom of this post) I show you how you can obtain the MDOP ADMX templates for use within Active Directory Group Policy. I show you where to download the MDOP templates from, … Continue reading →

Posted in 1910, ADMX, ADMX Templates, MBAM | Leave a comment

Learn about Bitlocker Management in Microsoft Endpoint Configuration Manager version 1910 – part 8 Migration

Posted on January 19, 2020 by ncbrady

Introduction In this video (linked at the bottom of this post) I show you how you can migrate existing MBAM managed clients to Configuration Manager using the new BitLocker Management feature that was released in Microsoft Endpoint Configuration Manager version … Continue reading →

Posted in 1910, MBAM, Migration | 6 Comments

Learn about Bitlocker Management in Microsoft Endpoint Configuration Manager version 1910 – part 7 Reporting and compliance

Posted on January 8, 2020 by ncbrady

Introduction In this video I show you how you use the built in reports from the BitLocker Management feature that was released in Microsoft Endpoint Configuration Manager version 1910. I explain what each of the 5 built in reports offer … Continue reading →

Posted in 1910, MBAM, Reporting | Leave a comment

Learn about Bitlocker Management in Microsoft Endpoint Configuration Manager version 1910 – part 6 forcing decryption

Posted on December 25, 2019 by ncbrady

Introduction In this video I show you how you can enforce decryption of BitLocker encrypted drives in Microsoft Endpoint Configuration Manager version 1910. It involves the use of a custom Configuration Baseline with a Configuration Item to set a registry … Continue reading →

Posted in 1910, MBAM | Leave a comment

Learn about Bitlocker Management in Microsoft Endpoint Configuration Manager version 1910 – part 5 key rotation

Posted on December 17, 2019 by ncbrady

Introduction In this video I show you how key rotation works when a key has been revealed via the helpdesk using Bitlocker Management integrated as a feature in Microsoft Endpoint Configuration Manager version 1910. To see a list of all … Continue reading →

Posted in 1910, key rotation, MBAM | Leave a comment

Learn about Bitlocker Management in Microsoft Endpoint Configuration Manager version 1910 – part 4 Enforce encryption

Posted on December 17, 2019 by ncbrady

Introduction In this video I show you how to enforce encryption with no user interaction using Bitlocker Management in Configuration Manager 1910 (and a compliance baseline containing a configuration item with 2 registry keys). Below are the key path and … Continue reading →

Posted in 1910, MBAM | Leave a comment

Learn about Bitlocker Management in Microsoft Endpoint Configuration Manager version 1910 – part 3 customize the portals

Posted on December 14, 2019 by ncbrady

Introduction In this video I show you how to customize the self service portal to suit your organization, and I show you how  you can change what a person see’s in the help desk based on which Active Directory Security … Continue reading →

Posted in 1910, MBAM, self service | Leave a comment

Learn about Bitlocker Management in Microsoft Endpoint Configuration Manager version 1910 – Part 2, configure portals

Posted on December 10, 2019 by ncbrady

Introduction In this video I show you what you need to know to get the Bitlocker Management (formally MBAM) web site portals working in Microsoft Endpoint Configuration Manager version 1910, please check it out. Install the MBAM portals – https://docs.microsoft.com/en-us/configmgr/protect/deploy-use/bitlocker/setup-websites … Continue reading →

Posted in 1910, MBAM, MBAM, pki | Leave a comment