Bitlocker Setup
This topic for the IT professional explains how BitLocker features can. And encrypting the volume prior to running the Windows setup process. BitLocker with PIN. Boot into BIOS (Setup menu) and confirm the system is in UEFI mode – TPM is activated. Under Post Behavior, confirm that Fastboot mode is set to Thorough. Boot into the operating system. Set up BitLocker on the desired drive and reboot to begin the encryption. This week’s post is all about Windows BitLocker management with Microsoft Intune. When it comes to data protection, internal and external drive protection is important in the event a device is lost or stolen. In the past to manage Windows BitLocker we typically needed to create Group Policies or use System Center Configuration Manager.
This information is intended for technical support providers. End users should contact their technical support for assistance.Prerequisites.Update the computer to the latest BIOS before beginning the encryption process.If the client computers have been previously encrypted, you must decrypt them before using any of these three processes.
Bitlocker Setup Guide
These processes will only work if the client computers are not currently encrypted with any other solution.Before you start any process, the device must be connected to Cornell Active Directory (AD), and the MBAM GPO Settings must be applied to the unit's OU. The GPO can be found here:Group Policy ManagementForestDomainscornell.eduGroup Policy ObjectsCU-MBAMInstall via MBAM Task Sequence found in CM2012This Task Sequence provides a largely hands-off process, which usually completes in about 20 minutes.