
Select the encryption method for fixed data drives: XTS-AES 256-bit Select the encryption method for operating system drives: XTS-AES 256-bit
GPO Path – MDOP MBAM (BitLocker Management) SettingĬhoose drive encryption method and cipher strength.
The BitLocker recovery page provides Helpdesk contact informationīelow are all of the settings contained within my demo example. The use of passwords (non-TPM) is blocked. For this example I am going to require the following settings Open the newly created GPO and expand to Computer Configuration\Policies\Administrative Templates\Windows Components\MDOP MBAM (BitLocker Management) Ĭonfiguring the GPO is going to depend on your requirements, whether or not you are going to apply BitLocker to encrypt removable drives and so on. Create a new Group Policy object and name it according to your naming convention. Open Group Policy Management Editor or the Advanced Group Policy Management console (depending on your environment). The first thing you will need to do is to update your policy central store with the MBAM ADMX group policy files which can be downloaded from Microsoft – h ttps://Now let us step through creating a new GPO for the Windows clients
Part 4: Validation of key storage and recovery tests Group Policy ConfigurationĪll settings for MBAM client deployments are configured through Group Policy.
Part 3: Configuration of GPO policies and client agent deployment Part 2: Validating IIS sites and customisation
BITLOCKER DOWNLOAD 2019 HOW TO
In this the third part, we will look at how client GPO policies are configured and how to push out the MBAM Client Agent via Systems Center Configuration Manager (ConfigMgr) In parts 1 & 2 of this series of posts on installing and configuring Microsoft Bitlocker Administration and Monitoring (MBAM) we ran through the installation, validation and customisation options available.