![]() ![]() ![]() If you enabled the Hardware Compatibility checking policy (mentioned above), the MBAM administrator need to to approve the devices to get encrypted and change their status to compatible from the MBAM admin site. There is a 24 hr check delay when you turn the machine compatible from the MBAM console.For those of you who are unaware of what MBAM is, the official name is Microsoft BitLocker Administration and Monitoring.For more information about MBAM registry and Timers please check this link By default the MBAM client will wait for 90 minutes random time delay before reporting to the MBAM server with any status, to overcome this default setting you need to add the DWORD key NoStartupDelay to the HKLMSoftwareMicrosoftMBAM with value of 1 on each client.In many cases MBAM fails to take ownership of the TPM and its recommended to install this fix.Both are available in the MBAM source files. Install the MBAM client on the Laptop (32 bit or 64 bit client).Enable TPM from the Laptop BIOS (check your Laptop Manufacturer BIOS settings).The Key steps for successful Bitlocker/MBAM client implementation are as follows: Only Laptops that are approved and turned to compatible (Hardware TAB in the MBAM admin site) will get encrypted. Under the Client Management category you can enable Hardware compatibility checking, this feature can be used to identify BitLocker-capable computers and exclude specific hardware that you don’t want encrypted. Depending on your Company policy you may enable or disable the Removable drive encryption (USB thumb drive). Normally we would enable the Client services and enforce the Fixed drive and OS drive encryption (PIN+Password). ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |