Fixing DMA requirement for silent and automatic BitLocker encryption for Dell models
Last year, I had blogged about addressing the DMA requirement for Lenovo devices. This time I am covering the same requirement for Dell models using MDT. I recently did an MDT implementation and as part of the requirements, Dell devices needed to be BitLocker encrypted. Nothing unusual about it, except some models refused to get encrypted. Having dealt with the similar issue in the past with Lenovo devices, I immediately checked the event viewer logs and details in System information. As suspected the issue turned out to be un-trusted DMA buses. Dell has provided the solution which needs to be put in an automated process. This is how you can go about it. The solution involves 2 steps – 1. Set Permissions to take ownership of the DmaSecurity registry key. 2. Import the Add_AllowedBuses.reg containing the Bus classes provided by Dell. Set Permissions I created an application containing the SetACL.exe utility and the .bat file to give ownership and full rights to 'Everyo...