When set to Enabled for Organization, users with devices only with the Organization Identifier set within policy receive "Access denied" error messages when they try to save data to unencrypted fixed data drives. When set to Enabled, users receive "Access denied" error messages when they try to save data to unencrypted fixed data drives.
When set to Disabled all fixed data drives on the computer are mounted with Read and Write access. With this policy setting, you can set whether BitLocker protection is required for fixed data drives to be writable on a computer. When set to Disallow, this option is greyed out, and is not a selectable option either within the Dell Encryption UI, nor in Windows settings.ĭeny Write Access to Fixed Drives Not Protected by BitLocker This policy displays the options for protecting a Fixed (non-Operating System Volume) Disk, when "Encrypt Fixed Disks" is set to "Turn On Encryption." Setting this policy to Disabled allows for BitLocker to protect the endpoint, regardless of the disk’s capabilities.Ĭonfigure the Use of Smart Cards on Fixed Data Drives When set to Enable, if a Self-Encrypting Drive (SED) is detected, BitLocker does not protect the endpoint. When set to Do Not Allow, this option is greyed out, and is not a selectable option either within the Dell Encryption UI, nor in Windows settings.ĭisable BitLocker on Self-Encrypting Drives When multiple items are set to "Allow," the end user is presented a selection box to make their choice. When set to Allow, enable this setting as a selectable option to the end user. No prompt is given to the end user on an endpoint. When set to Required, this is the only option for end users. When Enabled, ensures that older TPM models are supported, and enables the ability to escrow BitLocker keys to USB on devices without TPMs. This property enables the next five policies and enables for defined protectors to be enabled on managed endpoints.Īllow BitLocker Encryption Without a Compatible TPM. Require other Authentication at System Startup. Setting this to Turn Off Encryption forces a decryption of the volume and cannot be modified by local administrators. Setting this to Turn On Encryption forces encryption of the volume and cannot be modified by local administrators. When set to Do Not Manage, the local administrators of devices can modify BitLocker.
When enabled, during encryption the device is not allowed to go into any sleep states. This plug-in activates the TPM if it is "On" but not properly activated. This plug-in is required for all Dell BitLocker manager policies to properly apply.Įnables/Disables the TPM Management Plugin. Enables/Disables the BitLocker Manager Plugin.
0 kommentar(er)
