We do exactly that. We use Bitlocker and MBAM 2.0. If a user messes up their pc, the Help Desk can get the key for them.
From: [email protected] [mailto:[email protected]] On Behalf Of Kevin Johnston Sent: Monday, June 17, 2013 9:32 PM To: '[email protected]' Subject: [mssms] RE: Disk Encryption Actually we do have SA. It just took them this long to realize that they need to encrypt data. We currently use WDS/MDT to do our images. I never understood why they went with Win 7 Pro and not enterprise on the machines (done before my time). Mistakes made by the past affect the future right :) But if going to Ent is a possible solution (only currently encrypting laptops) then they may still decide to do that. I figured bitlocker would be a suggestion, I just don't know how reliable and manageable it is. Also it is possible we will be going to Win 8 at some point too (I don't make any decisions, I don't wear a suit) From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of Jason Sandys Sent: Monday, June 17, 2013 9:37 PM To: [email protected]<mailto:[email protected]> Subject: [mssms] RE: Disk Encryption Good luck with that. The only full-disk encryption that plays well with OSD and MDT is ... surprise, Bitlocker - which of course your org cannot use because (being blunt here) your org was too cheap to actually buy SA and is now ending up paying even more in the long run because it saved them money in the short run. Sorry, more of rant not direct at you personally, just to short-sighted (worthless) MBAs. J From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of Kevin Johnston Sent: Monday, June 17, 2013 4:36 PM To: '[email protected]' Subject: [mssms] Disk Encryption Was wondering if anyone deploys disk encryption along with their deployments? We are looking into this, and just getting a feel for some of the players. Needs to be manageable and I would like to see something that is easy to deploy, maybe something that allows us to encrypt after an image (I guess kinda like bitlocker) but I am not sure how powerful it is. Our machines are solely Windows 7 Pro x64 machines. Anyone have any recommendations or suggestions? Thanks, Kevin Johnston
