Q: How do I force a machine using Microsoft BitLocker Administration and Monitoring to prompt users to encrypt immediately?

A: By design the Microsoft BitLocker Administration and Monitoring (MBAM) client waits a random period of time between one and 90 minutes when its service starts, before prompting users to encrypt. This is done to avoid any mass hit on the MBAM server infrastructure for new deployments.

To force a machine to prompt immediately, you can make a registry change to remove the 90-minute random delay and prompt the user immediately after restarting the MBAM client service:
1. Start the registry editor (regedit.exe)
2. Go to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MBAM
3. Select New - DWORD value
4. Enter a name of NoStartupDelay
5. Double-click the new value and set the data to 1 and click OK
6. Close the registry editor
Restart the MBAM client service for the change to take effect.

To read more FAQs, go to John Savill's Windows IT Pro FAQs page

Please or Register to post comments.

IT/Dev Connections

Las Vegas
September 30th - October 4th

Paul ThurottYou'll have the opportunity to experience:
• The Microsoft
Technology Roadmap
• Office 365 Implementation
• Hyper-V Optimizing
• Windows 8 Deployment
and much more!

Come See Paul Thurrott & Rod Trent in Person!

Early Registration Now Open

Upcoming Training

Mastering System Center 2012

During over 6 hours of training you can join John Savill from your computer as he will walk you through the key components and capabilities of System Center 2012, what’s involved in using the components, and the benefit they can bring to your environment.

Register Now

Current Issue

May 2013 - The NameTranslate object is useful when you need to translate Active Directory object names between different formats, but it's awkward to use from PowerShell. Here's a PowerShell script that eliminates the awkwardness.

CURRENT ISSUE / ARCHIVE / SUBSCRIBE

Windows Forums

Get answers to questions, share tips, and engage with the Windows Community in our Forums.