Reply to thread

Message

<blockquote data-quote="Studynxx" data-source="post: 1097765" data-attributes="member: 98674">Companies are &quot;forced&quot; to, tho. Yes, they are. They have to have some form of drive encryption, and since the vast majority of workstations (company laptops) run on Windows Pro or Enterprise, BitLocker is the go-to FVE method. Companies just find it way too easy to implement it and enforce it: MDT has it available as an option, or you can use Intune along with AAD and then enforce it with a standard PIN that way, that a user will then be prompted to change upon next logon. Or BitLocker enforcement also happens to be a Windows Server role.&nbsp; Way too easy for them not to do it, plus if they don&#039;t, they will lose their cyber insurance. I know this sounds weird but &quot;go look it up&quot; if you don&#039;t believe this. I used to be a sysadmin for DT then Vodafone, which doesn&#039;t say or mean much, but we always enforced it.Some thing I&#039;m good at, some things I suck at, it&#039;s a learning process so it takes time to get good at most things. I don&#039;t know what else to say, one thing I&#039;m not is a cybersec professional.Zero Trust. Ideally nobody should have access to my data other than me. Which is why I asked the OP question(s) and still do. Either BL has a backdoor and I&#039;ll start using Veracrypt, or it doesn&#039;t and I&#039;ll keep using BL. Or... I&#039;ll use cryptomator + VeraCrypt + BL. Zero Trust is all that matters to me, complete privacy regarding even youtube for instance, anything really. BitLocker is my go-to tho as it&#039;s incredibly easy to script the entire process via Powershell and then inject the script into your system image which is what I did.</blockquote>

[QUOTE="Studynxx, post: 1097765, member: 98674"] Companies are "forced" to, tho. Yes, they are. They have to have some form of drive encryption, and since the vast majority of workstations (company laptops) run on Windows Pro or Enterprise, BitLocker is the go-to FVE method. Companies just find it way too easy to implement it and enforce it: MDT has it available as an option, or you can use Intune along with AAD and then enforce it with a standard PIN that way, that a user will then be prompted to change upon next logon. Or BitLocker enforcement also happens to be a Windows Server role. Way too easy for them not to do it, plus if they don't, they will lose their cyber insurance. I know this sounds weird but "go look it up" if you don't believe this. I used to be a sysadmin for DT then Vodafone, which doesn't say or mean much, but we always enforced it. Some thing I'm good at, some things I suck at, it's a learning process so it takes time to get good at most things. I don't know what else to say, one thing I'm not is a cybersec professional. Zero Trust. Ideally nobody should have access to my data other than me. Which is why I asked the OP question(s) and still do. Either BL has a backdoor and I'll start using Veracrypt, or it doesn't and I'll keep using BL. Or... I'll use cryptomator + VeraCrypt + BL. Zero Trust is all that matters to me, complete privacy regarding even youtube for instance, anything really. BitLocker is my go-to tho as it's incredibly easy to script the entire process via Powershell and then inject the script into your system image which is what I did. [/QUOTE]

Verification