MDT Bitlocker

[chekmate1984]

Hi all

 

I had reimaged some Laptops few weeks ago using MDT and noticed few machines have bitlocker prompt randomly!

 

No hardware has been changed so not sure reason but where can i find bitclocker key? i can see on some laptops the text file on root of C:

 

Can i tweak MDT so it saves the file on server somewhere?

[RLR]

You have a few options.

 

1) Setup MDT to save bitlocker keys to Active Directory during imaging. This would require making sure AD is setup to receive bit locker keys and your MDT task sequence has an enable bitlocker task ticked to save the key to active directory. You may need to set the correct group policies for the machines you're imaging also to make sure you can save the key.

 

2) Setup MBAM which seems to be the more modern method. I don't have any experience in this so can't help but will likely move to it at some point.

[tmoon-mint]

I use this. Stores the recovery key in the computer object in AD.

 

 

Very useful for when a member of staff encrypts an external drive and then forgets the password!

[mullet_man]

Ah does this also store external drive keys too?

[tmoon-mint]

Ah does this also store external drive keys too?

 

It does! In the computer object of the device it was encrypted on but I find it’s easier just to search for the recovery ID in AD.