Anyone using MBAM to manage Bitlocker??

[mcvickj]

This is probably a long shot but is there any here who uses Microsoft Bitlocker Administration & Monitoring? I just setup an App and DB server at work so we can move towards encrypting our laptops. The one annoyance I can't seem to figure out is it possible to setup the PIN as the end users AD password and then have it pass it through to the OS? So when the user turns on their laptop it stops and asks for the "PIN" to unlock the drive and then it continues and logs in with the users AD credentials?

Or even if I can't have it automatically log into the OS is there a way to sync the PIN to AD so when a user changes their AD password it would update the TPM with the new password? That way the user wouldn't have to go into the Control Panel to find Manager Bitlocker and change the PIN manually.

 

[[DHT]Osiris]

We do, and as far as I know, no, there's no way to do that. The TPM/bitlocker PIN are a self-enclosed system, independent of AD or any other identity management system. Also, I'm pretty sure the PINs are numeric only, and restricted to like, 6 or 8 digits, that could be wrong though.

There is an option for a 'password' pin on certain levels of TPM chips, but again, that's a thing between bitlocker and the TPM, nothing to do with AD.