Enabling BitLocker can be done a number of ways with and without interaction. When deploying Windows with SCCM you can enable BitLocker in a task sequence, or if you have Microsoft BitLocker Administration and Monitoring (MBAM), you can require BitLocker be enabled post deployment. I wanted a way to automatically enable BitLocker with Group Policy, without requiring user interaction and without requiring MBAM and figured a PowerShell script was the easiest way to do it.Continue reading “Enabling BitLocker automatically without MBAM”
There are many reasons to disable and stop using SMB1 in Windows. It’s insecure and isn’t efficient either. I’m not the first to mention that it should be disabled and likely won’t be the last.
With that in mind, Microsoft has a page on how to disable it (linked below), but I’ll go through a simple way to use SCCM and PowerShell to ensure it’s disabled across your fleet.Continue reading “Disable SMB1 with PowerShell and SCCM”