Jump to content


Kevin79

Bitlocker and MBAM

Recommended Posts

I want to use Stand-alone media to install systems that aren't currently connected to our domain. The computers will eventually be connected and joined to the domain. Is there a way to enable bitlocker and install MBAM during the OS install and have it register in the MBAM database when it joins to the domain?

Share this post


Link to post
Share on other sites


How do I set up my task sequence and settings so that it prepares the partitions during OSD but doesn't actually bitlocker it until after I join to the domain? 

Share this post


Link to post
Share on other sites

I don't see a problem with this. Install the MBAM client in your build or distribute after build time.

Set up MBAM server and associated group policy.

When it joins the domain you'll get group policy and the MBAM client will kick in and prompt the user for a PIN and encryption will start.

You need to add some REG keys to make this happen quickly

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE\MDOPBitLockerManagement]
"ClientWakeupFrequency"=dword:00000001
"StatusReportingFrequency"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MBAM]
"NoStartupDelay"=dword:00000001

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...

×
×
  • Create New...