newpersn Posted September 27, 2017 Posted September 27, 2017 So i been asked to look in to device encryptions (mostly staff laptops) How do you do your laptop encryption? We have Sophos endpoint and Some staff on windows 10 laptops (i dont think our laptops have tpm chip) Thank you in advance
LeMarchand Posted September 27, 2017 Posted September 27, 2017 Bitlocker on everything that it works on (there's a GPO that allows it on non-TPM devices). Some older devices don't seem to get on with it, so they get VeraCrypt.
Blue_Cookeh Posted September 27, 2017 Posted September 27, 2017 BitLocker all the things! We use MDOP MBAM with GPOs to manage it and do key escrow This works really well for external media too.
newpersn Posted September 27, 2017 Author Posted September 27, 2017 Bitlocker on everything that it works on (there's a GPO that allows it on non-TPM devices). Some older devices don't seem to get on with it, so they get VeraCrypt. Was playing with bitlocker on an external hard drive and it seemed alright. Just wondered about device encryption. BitLocker all the things! We use MDOP MBAM with GPOs to manage it and do key escrow This works really well for external media too. What’s MDOP MBAM? What wrong with bitlocker?
LeMarchand Posted September 27, 2017 Posted September 27, 2017 Was playing with bitlocker on an external hard drive and it seemed alright. Just wondered about device encryption. What’s MDOP MBAM? What wrong with bitlocker? Sorry, I've not been able to get external device encryption enshrined in the constitution yet. We Bitlocker all staff laptops, whether TPM or not, apart from the few poor souls stuck with old HP 6325s that will encrypt, but then keep throwing Bitlocker errors after they have been in the wild for a while. (That's where we use VeraCrypt). I think MDOP MBAM was a hit for Hanson back in 1997.
FN-GM Posted September 27, 2017 Posted September 27, 2017 Was playing with bitlocker on an external hard drive and it seemed alright. Just wondered about device encryption. What’s MDOP MBAM? What wrong with bitlocker? MBAM = Microsoft BitLocker Administration and Monitoring MDOP = Microsoft Desktop Optimization Pack Microsoft BitLocker Administration and Monitoring is a product of Microsoft Desktop Optimization Pack. 1
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now