Hey Guys, I've lurked around this site a bit and it's a great resource so thanks! I have my own question now though around MBAM that I can't seem to find much on and was hoping maybe someone has experienced something similar. I am trying to use the method documented here as part of a Task Sequence in ConfigMgr - https://technet.microsoft.com/itpro/mdop/mbam-v25/how-to-enable-bitlocker-by-using-mbam-as-part-of-a-windows-deploymentmbam-25 I am using the MS provided Powershell script Invoke-MbamClientDeployment.ps1 -RecoveryServiceEndpoint "https://FQDN/MBAMRecoveryAndHardwareService/CoreService.svc"- IgnoreEscrowOwnerAuthFailure At the moment this step fails with 0x0000001 incorrect function. I'm not sure which function that is exactly. In the smsts.log the offending error is attached. Cheers guys.