Q: How do I force a machine using Microsoft BitLocker Administration and Monitoring to prompt users to encrypt immediately?

To force a machine to prompt for encryption immediately, you can make a registry change.

John Savill

September 26, 2011

1 Min Read
ITPro Today logo in a gray background | ITPro Today

A: By design the Microsoft BitLocker Administration and Monitoring (MBAM) client waits a random period of time between one and 90 minutes when its service starts, before prompting users to encrypt. This is done to avoid any mass hit on the MBAM server infrastructure for new deployments.

To force a machine to prompt immediately, you can make a registry change to remove the 90-minute random delay and prompt the user immediately after restarting the MBAM client service:
1.Start the registry editor (regedit.exe)
2.Go to HKEY_LOCAL_MACHINESOFTWAREMicrosoftMBAM
3.Select New - DWORD value
4.Enter a name of NoStartupDelay
5.Double-click the new value and set the data to 1 and click OK
6.Close the registry editor
Restart the MBAM client service for the change to take effect.

To read more FAQs, go to John Savill's Windows IT Pro FAQs page

Read more about:

Microsoft

About the Author

Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.

You May Also Like