We also do it to our Windows 7 machines, the setup is not quite as nice as it was certainly a gen 1 product (the alerting and reporting in event viewer isn't as rounded as Win8/10), Win7 also forces the entire drive to encrypt at once vs only encrypting the data on the drive that happens in Win8/10 so the initial process is longer. They still report to the MBAM management and on that end it's fine. As for the performance the impact for us has been negligible but our base machines are quite well equipped (3/4Gen i5, 8GB, 120GB SSD).
Nathan Shelby Director of Systems Engineering – Quote Wizard <https://quotewizard.com/> [email protected] / 206-753-2626 Malo Periculosam Libertatem Quam Quietum Servitium On Fri, Nov 6, 2015 at 11:14 AM, Brian Desmond <[email protected]> wrote: > *The number I’ve heard quoted before is potentially a 10% decrease in I/O > performance. I’ve never heard from a customer or end user that they’ve had > actual impact from that – certainly my laptop and desktop machines that are > Bitlocker’ed are not noticeable any different. If you think about what a > small SATA drive can deliver – 40-50 IOPS tops, you’re looking at a > marginal decrease in performance.* > > > > *I hav ea number of customers that have Bitlocker/MBAM deployments and it > works well. If you’re already an MDOP customer I think it’s a no-brainer to > take advantage of the investment you’ve already made.* > > > > *Thanks,* > > *Brian Desmond* > > > > *(w) 312.625.1438 | (c) 312.731.3132* > > > > *From:* [email protected] [mailto: > [email protected]] *On Behalf Of *Heaton, Joseph@Wildlife > *Sent:* Thursday, November 5, 2015 6:30 PM > *To:* '[email protected]' <[email protected]> > *Subject:* RE: [NTSysADM] Bitlocker and MBAM > > > > Have you noticed any performance issues on the encrypted machines? We > used to run Pointsec, and it made the laptops performance horrible. I need > to avoid that if we go to Bitlocker. Also, do you have any experience with > Bitlocker and Win 7 machines? We won’t be going to Win 10 until next year > at the earliest. > > > > *From:* [email protected] [ > mailto:[email protected] <[email protected]>] *On > Behalf Of *Nathan Shelby > *Sent:* Thursday, November 05, 2015 4:23 PM > *To:* [email protected] > *Subject:* Re: [NTSysADM] Bitlocker and MBAM > > > > Joe, > > > > We've been running it on our Windows 8.1 and Windows 10 deployments using > MBAM along with MDT to script auto-encrypt at deploy. We utilize the TPM > module in our Dell and Lenovo laptops along with the Microsoft Surface Pro > 2/3/4 devices. The MBAM management has been great including the recovery > website for issues where a laptop has detected a boot device change and > must get a recovery key to unlock, among ~75 mobile devices this has > happened once, and even then this laptop began encryption and then was out > of contact with the domain when it finished encryption once the key was > entered and the laptop had contact with the domain again it has not re > occurred. > > > Nathan Shelby > Director of Systems Engineering – Quote Wizard <https://quotewizard.com/> > [email protected] / 206-753-2626 > Malo Periculosam Libertatem Quam Quietum Servitium > > > > On Thu, Nov 5, 2015 at 3:06 PM, Heaton, Joseph@Wildlife < > [email protected]> wrote: > > Anyone here running Bitlocker in their environments, along with MBAM for > the management? We’re starting to research in order to do a POC, were > wondering of personal experiences. > > > > Thanks, > > > > Joe Heaton > > Information Technology Operations Branch > > Data and Technology Division > > CA Department of Fish and Wildlife > > 1700 9th Street, 3rd Floor > > Sacramento, CA 95811 > > Desk: (916) 323-1284 > > > > Every Californian should conserve water. Find out how at: > > [image: SaveOurWater_Logo] <http://saveourwater.com/> > > SaveOurWater.com <http://saveourwater.com/> · Drought.CA.gov > <http://drought.ca.gov/> > > > > >
