Windows disk encryption through Systems Manager?

[MrLeoChan]

I know for OSX, there is an option in the Systems manager to select FileVault. Does Windows have an option for that? If not, what programs are you using? Bitlocker?

[PhilipDAth]

We only use BitLocker.

[felix_fx2]

I am using bitlocker, nope Systems manager has no option to enforce bitlcker nor can it monitor.

I am suffering due to it.

[PhilipDAth]

Can you control it via group policy?

[felix_fx2]

Don't have a AD, Local group policy is not dependable and no visibility/reporting.

[PhilipDAth]

What about sending a command to every machine to turn on Bitlocker? If they have it enabled already nothing will happen. Otherwise it will turn it on.

I think the command would be something like:
manage-bde -on
or perhaps it might be safer to do:
manage-bde -on c:

Do this on a test machine first!

Here is some more info about the process:
https://docs.microsoft.com/en-us/windows/device-security/bitlocker/bitlocker-use-bitlocker-drive-enc...

[felix_fx2]

I am already rolling out via another tool i have (a script agent), couldn't wait.
Now this is Geared towards reporting and enforcing, comparing with whats there for OSX in meraki MDM

on my wish list is systems that are enforced have the bitlocker recovery key escrowed to dashboard (instead of AD)

[PhilipDAth]

Are you by chance using Office 365?

[felix_fx2]

we are powered by Google

[Phil1]

Following topic as I would also love a solution to this. I am in the same boat as we are powered by google. @felix_fx2 did you manage to get any decent solution in place?

[PatrickL]

Hi everyone,

We have an early beta version of BitLocker management in testing right now. If anyone is interested in providing feedback, please fill out this form and we'll reach out if we see a match!

[felixfx2]

Beam me up scotty !

[AITS]

Is Meraki close to a production release of Systems Manager to support BitLocker?

[PhilipDAth]

I don't know, but there was a BitLocker beta running last year.

[KPA]

We were told by our Rep that Meraki Systems Manager would manage and enforce BitLocker but that does not seem to be the case. We ended up using TruGrid BitLocker Management since it works whether or not you have Active Directory. TruGrid does not require any scripting and does not require GPO.

Kay

[ChemistryGP]

Not interested in paying for another application for Bitlocker management - SM should do this out the box.

@PhilipDAth You mentioned earlier in the thread O365 accounts - is there a workaround here?

[T1]

The way they Bitlocker support is "implemented" right now, Meraki enables it and user is prompted to sign in with Microsoft account to store decryption key OR save decryption key to an external device so we had to disable it as it creates confusion.

[GreenMan]

An old thread, but people here may be interested in recently upgraded support for Bitlocker in Systems Manager, from Windows 10 v1803 onwards:   https://documentation.meraki.com/SM/Apps_and_Software/Windows_BitLocker_Encryption_with_Meraki_Syste...