May 24 2018 02:21 AM
May 24 2018 02:21 AM
Hi there !
In my company, we are deploying a new master of Windows 10 Pro.
We would like to enable Bitlocker thanks to a script.
The bitlocker has to be configured with tpm, with a specific recovery key (a master key which will be the same on every computer) and it has to encrypt the entire drive.
The master will just have an admin session, when the image will be installed, the user's session will be created manually so there is no sysprep.
Since the script will contain the master bitlocker key, it has to be deleted from the drive
Pcs are laptops and desktop from Dell, and are equipped with tpm chips.
I have created a custom Dell BIOS settings to apply on first boot which create a BIOS password, and HDD Password, enable TPM, enable UEFI boot only, Disable Legacy rom boot and enable SecureBoot.
I found some scripts on Microsoft community and here and there on internet but nothing is working.
Does anyone has this kind of script ?
Thanks