Deploy RSAT (Remote Server Administration Tools) for Windows 10 v20H2 using ConfigMgr and PowerShell (62,112).Deploy RSAT (Remote Server Administration Tools) for Windows 10 v2004 using ConfigMgr and Powershell (69,286).
Deploy RSAT (Remote Server Administration Tools) for Windows 10 v1909 using ConfigMgr and Powershell (91,621).Windows 10 Toast Notification Script (273,010).Download the scripts here: Categories SCCM 2012, Windows 8 Post navigation
#Bitlocker download for win 8.1 how to
I will update this post on how to do that ASAP. (You can enable the TPM chip from within the task sequence using a script provided by Lenovo. Make sure the steps are exactly as on the picture.ĥ) Finally I installed the BitLocker Drive Encryption Administration tools on my DC’s, which enables me to view the BitLocker recoverykeys on the computer objects in AD.Ħ) Deploy the task sequence to the proper collection, and make sure the TPM chip is enabled in BIOS and you are set. 2012 SP1 has added support for pre-provisioning of BitLocker, which means SCCM will start encrypting the disk right after partitioning of the disks, and will be done with the image. Computer Configuration > Policies > Administrative Templates > Windows Components > BitLocker Drive Encryption > Operating System Drives:Ĥ) Configuring the task sequence in ConfigMgr was pretty straightforward.Computer Configuration > Policies > Administrative Templates > Windows Components > BitLocker Drive Encryption:.Computer Configuration > Policies > Administrative Templates > System > Trusted Platform Modul Services:.These are the exact policies that I apply to my Windows 8.1 OU: Here: (v=ws.10).aspx and here: ģ) Further to that, I configured BitLocker policy settings for the Windows 8.1 clients, enabling the TPM chip to backup BitLocker recoverykeys into AD. This is explained in details on TechNet as well. Here’s something about the topic on TechNet: (v=ws.10).aspx#BKMK_3Ģ) What I had to do instead, was to verify that the schema objects was there, and delegate the correct permissions on the OU where my new Windows 8.1 computers are going to be.
You have to though, if you’re running 2003 domain controllers. All the necessary information was spread across several TechNet articles, so I decided to put together a post explaining how I did it.ġ) Fortunately for me, our domain is running on 2012 servers, so no need to extend the AD schema. I had no previous experience with BitLocker, so I started out reading and learning and eventually got it to work. We have decided to encrypt our harddrives on our upcoming Windows 8.1 environment using BitLocker.
0 kommentar(er)
