This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Suspend POA for Bitlocker

Hi,

We are currently looking into setting up GPO for Windows Updates, as the feature updates require multiple reboots, every reboot will require the enter of the Bitlocker PIN.

Is there a way to suspend Bitlocker so this can happen? Not sure if it can be link to our GPO?

Kind regards, Dan

This thread was automatically locked due to age.

Parents

0 MichaelMcLannahan over 4 years ago

I'd also add Dan - 1803 onwards is 100% BL aware. Link here for more details...

https://docs.microsoft.com/en-gb/archive/blogs/mniehaus/new-upgrade-to-windows-10-1803-without-suspending-bitlocker

Note this DOES need the correct config though - like secure boot enabled?
Cancel
Vote Up 0 Vote Down

Cancel
0 Dan Petford over 4 years ago in reply to MichaelMcLannahan

Yes all of ours are Secure Boot enabled, but is that using Windows Bitlocker and not Bitlocker through SSG?
Cancel
Vote Up 0 Vote Down

Cancel
0 MichaelMcLannahan over 4 years ago in reply to Dan Petford

I'm not sure how you intend to roll out the update (and from what from to versions) but it's just an additional command/string on setup? Yes this would be Windows Bitlocker management - but its the same thing. There is no Sophos SafeGuard Bitlocker as such.
Cancel
Vote Up 0 Vote Down

Cancel
0 Dan Petford over 4 years ago in reply to MichaelMcLannahan

OK thanks, sorry I got confused, so our Windows Updates are going to be rolled out via Group Policy every Tuesday which is Microsoft's "Patch Tuesday", the feature updates we are going to delay a month, so assuming they are Secure Boot enabled, and are on 1803 onwards, they should automatically suspend without and new policies added on SSG?
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Dan Petford over 4 years ago in reply to MichaelMcLannahan

OK thanks, sorry I got confused, so our Windows Updates are going to be rolled out via Group Policy every Tuesday which is Microsoft's "Patch Tuesday", the feature updates we are going to delay a month, so assuming they are Secure Boot enabled, and are on 1803 onwards, they should automatically suspend without and new policies added on SSG?
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Dan Petford over 4 years ago in reply to Dan Petford

Is the auto suspend for BitLocker just on features updates? Or can it be done on normal updates?
Cancel
Vote Up 0 Vote Down

Cancel