BitLocker Deployment and Management Tools

A variety of tools can deploy and manage BitLocker on devices running Windows 10. Some tools may work best for a specific task. For example, Autopilot may do an excellent job of deploying or enabling BitLocker but is not a tool for monitoring or reporting. Intune and System Center Configuration Manager have the most capabilities and longest support life cycle.

Some tools, such as Autopilot and Microsoft BitLocker Administration and Monitoring (MBAM), may require additional licensing, such as Software Assurance or similar User Subscription Licenses (User SLs). Remote Server Administration Tools (RSAT) is not a specific BitLocker tool but contains tools that can manage BitLocker.

The Future Support and Life Cycle score is Directions on Microsoft’s estimate of future Microsoft investment in the tools listed. Autopilot is the primary tool for deployment, although Intune and SCCM will receive the most investment for ongoing management.