Jump to content


PH25

SCCM Bitlocker pre provision - Without format

Recommended Posts

Is it possible for me to use a task sequence to pre provision and setup bitlocker on an existing drive? I don't want to have to reinstall OS on existing machines in order to get this working.

So, we have OS already installed and i want to use a task sequence to perhaps shrink volume and create a new bitlocker volume, then enable bitlocker.

Share this post


Link to post
Share on other sites

sounds like a big challenge, i'd just refresh them using the CM12 UEFI bitlocker task sequence which will take care of it all

Share this post


Link to post
Share on other sites

Sounds pretty doable to me. If you run at least Windows 8 you wouldn't even need a task sequence.

Just create a new BDE Partition with the BdeHdCfg command, then create a new Protector on your OS Drive with manage-bde and the "usedspaceonly" parameter and finally start the encryprion also with manage-bde.

All this assuming that you are not in UEFI mode since you got no BDE partiton already.

 

For Windows 7 you would still need a task sequence with Windows 8 PE boot image (at least) to create the Protector with usedspaceonly.

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...


×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.