Moving away from Safeguard

Hi Tom,

MBAM might actually not be the most future proof option, as MS ends the mainstream support next year.

https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-management-for-enterprises#managing-domain-joined-computers-and-moving-to-cloud

Moving on from SafeGuard BitLocker Management is definitely easier when your clients are at least on version 8.0, before that you cannot uninstall the SGN Client without decrypting the drive (which might get a bit painful) . Important to consider is, that the first user who logs in after the the reboot that concludes the uninstallation, needs to have admin rights. Otherwise the cleanup that runs after logon is not done properly.

After that you can take over the BL Management with another solution. Sophos Central Device Encryption is for example pretty easy, especially if you already have Sophos Central as AV.

Cheers

F.  

Hi Tom,

MBAM might actually not be the most future proof option, as MS ends the mainstream support next year.

https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-management-for-enterprises#managing-domain-joined-computers-and-moving-to-cloud

Moving on from SafeGuard BitLocker Management is definitely easier when your clients are at least on version 8.0, before that you cannot uninstall the SGN Client without decrypting the drive (which might get a bit painful) . Important to consider is, that the first user who logs in after the the reboot that concludes the uninstallation, needs to have admin rights. Otherwise the cleanup that runs after logon is not done properly.

After that you can take over the BL Management with another solution. Sophos Central Device Encryption is for example pretty easy, especially if you already have Sophos Central as AV.

Cheers

F.