Category Archives: System Center Configuration Manager (Current Branch)

Enabling Full Disk Encryption in Microsoft Endpoint Configuration Manager 1910 in a task sequence

Posted on January 18, 2020 by ncbrady

Introduction Microsoft Endpoint Configuration Manager 1910 came with BitLocker management capabilities (MBAM features), and this fits together nicely with task sequence steps regarding BitLocker. The option to enable Full Disk Encryption actually started with Configuration Manager 1806 but MBAM integration … Continue reading →

Posted in Full Disk Encryption | Leave a comment

Learn about MBAM in Microsoft Endpoint Configuration Manager version 1910 – part 7 Reporting and compliance

Posted on January 8, 2020 by ncbrady

Introduction In this video I show you how you use the built in reports from the BitLocker Management feature that was released in Microsoft Endpoint Configuration Manager version 1910. I explain what each of the 5 built in reports offer … Continue reading →

Posted in 1910, MBAM, Reporting | Leave a comment

Learn about MBAM in Microsoft Endpoint Configuration Manager version 1910 – part 6 forcing decryption

Posted on December 25, 2019 by ncbrady

Introduction In this video I show you how you can enforce decryption of BitLocker encrypted drives in Microsoft Endpoint Configuration Manager version 1910. It involves the use of a custom Configuration Baseline with a Configuration Item to set a registry … Continue reading →

Posted in 1910, MBAM | Leave a comment

Learn about MBAM in Microsoft Endpoint Configuration Manager version 1910 – part 5 key rotation

Posted on December 17, 2019 by ncbrady

Introduction In this video I show you how key rotation works when a key has been revealed via the helpdesk using MBAM integrated as a feature in Microsoft Endpoint Configuration Manager version 1910. Take a look !

Posted in 1910, key rotation, MBAM | Leave a comment

Learn about MBAM in Microsoft Endpoint Configuration Manager version 1910 – part 4 Enforce encryption

Posted on December 17, 2019 by ncbrady

Introduction In this video I show you how to enforce encryption with no user interaction using MBAM (and a compliance baseline containing a configuration item with 2 registry keys). Below are the key path and key names I used in … Continue reading →

Posted in 1910, MBAM | Leave a comment