[wds] Bitlocker after imaging

[RLR]

Is it possible for machines to be bitlockered automatically during imaging or just after imaging. I've tried googling but not coming back with much luck.

[snagrat]

Using just WDS? Not sure

 

MDT or SCCM can do it

[Sagima]

With win7 I think you can use setupcomplete.cmd to run microsoft's bitlocker script at the end of the deployment but I've never done it. a quick bit of googling came back with https://technet.microsoft.com/en-us/library/dd875527(v=ws.10).aspx for their script

I imagine there's something similar (or a gpo) for win10

[sted]

With win7 I think you can use setupcomplete.cmd to run microsoft's bitlocker script at the end of the deployment but I've never done it. a quick bit of googling came back with https://technet.microsoft.com/en-us/library/dd875527(v=ws.10).aspx for their script

I imagine there's something similar (or a gpo) for win10

 

from what i remember gpo can put bitlocker settings in but cant force a machine to start encrypting just controls how it encrypts etc

[DalekSec]

We have our SCCM 2012 R2 setup to do Bitlocker and put the key into AD in the same TS as imaging.

 

So it is possible, i remember it being a right faff though!

[Sagima]

I only vaguely recall the setupcomplete.cmd thing from a course I went on a while back. I googled win10 and the name of the script and looking at MDT – Windows 10 Enable Bitlocker | Eddie Jackson it would seem the script works for win10 too (it's for mdt but the script part should work for both)