Use of user groups for Bitlocker policies
Currently it is not possible to assign Bitlocker policies to individual user groups. Would be great to have such ability for clients with logged on service accounts or specific users which are not able to read the Bitlocker pre-boot message, i.e. visually impaired users.
Zimmer, Raimund
shared this idea
If you want to make exceptions to the policy assignment, it's a good idea to create a computer group where all the computers are members for which you want to make an exception. You can either add the computer group as an exclude in the assigned group, or work with conditional settings within the policy. Even if we could handle exceptions for a user group, which we can't at the moment, the currently logged on user is tricky because this exception wouldn't apply either before or after user logon. DriveLock should introduce a new assignment type based on the principle of computer ownership. Then, the admins can assign the group of owners. In the background, the membership is resolved and the policies are assigned to computers according to owner.