Moving away from Safeguard

Question

Hello, 
 Has anyone got any experience moving away from Safeguard to MBAM/AD key management? Just want to know people thoughts and experiences as this is something we are considering doing. 
 Many Thanks 
 Tom

Funkey · Answer

Hi Tom, 
 MBAM might actually not be the most future proof option, as MS ends the mainstream support next year. 
 https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-management-for-enterprises#managing-domain-joined-computers-and-moving-to-cloud 
 Moving on from SafeGuard BitLocker Management is definitely easier when your clients are at least on version 8.0, before that you cannot uninstall the SGN Client without decrypting the drive (which might get a bit painful) . Important to consider is, that the first user who logs in after the the reboot that concludes the uninstallation, needs to have admin rights. Otherwise the cleanup that runs after logon is not done properly. 
 After that you can take over the BL Management with another solution. Sophos Central Device Encryption is for example pretty easy, especially if you already have Sophos Central as AV. 
 Cheers 
 F.