MMS 2017

Session Description:
Everyone knows why it is good practice to encrypt their volumes, but not many think of the management of the recovery keys, and how to enforce company policy. Join Jason Sandys and Henrik Rading as they take you through the benefits and how-tos of implementing Microsoft BitLocker Administration and Monitoring (MBAM) in integration with Configuration Manager.

What you will learn:

• Gain knowledge of MBAM infrastructure and common implementation scenarios

• Learn about common implementation pitfalls

• Be able to implement and use MBAM in your own organization when you get back home

• Deploy MBAM and BitLocker as part of your OSD Task Sequence

Session Description:
Mark, Gary, and Troy will show what a desktop administrator can do to keep their workstations secure. Gain the upper hand in the never-ending battle to prevent security breaches. You will see some of the major advantages from a security perspective behind Windows 10.

What you will learn:

• Implement the newer XTS-AES algorithm when encrypting your systems with BitLocker.

• Use Credential Guard to protect against Pass-the-Hash attacks.

• Learn about AppLocker and Device Guard to see how you can secure your systems at the application and kernel levels.

• Analyze or create group policy settings with the Security Compliance Manager tool. - If there is time . . .