For example, help desk administrators can help users with key recovery. Encryption status per volume or per deviceĪllow other personas in your organization outside of the Configuration Manager console to help with key recovery, including key rotation and other BitLocker-related support.When a user unlocks the OS drive, specify whether to unlock only an OS drive or all attached drives. Manage BitLocker policies and escrow recovery keys for on-premises and internet-based clientsįor example: choose drive encryption and cipher strength, configure user exemption policy, fixed data drive encryption settings.ĭetermine the algorithms with which to encrypt the device, and the disks that you target for encryption.įorce users to get compliant with new security policies before using the device.Ĭustomize your organization's security profile on a per device basis. FeaturesĬonfiguration Manager provides the following management capabilities for BitLocker Drive Encryption: Client deploymentĭeploy the BitLocker client to managed Windows devices running Windows 8.1, Windows 10 or Windows 11. For more information on using Intune, see Windows Encryption. To manage encryption on co-managed Windows 10 or later devices using the Microsoft Intune cloud service, switch the Endpoint Protection workload to Intune.
0 kommentar(er)
