Edit

Share via

New-CMBlmSetting

Module:
ConfigurationManager Module

Create a BitLocker management settings policy.

Syntax

Default (Default) 

New-CMBlmSetting
    [-Policies <PolicyObject[]>]
    -Name <String>
    [-Description <String>]
    [-DisableWildcardHandling]
    [-ForceWildcardHandling]
    [<CommonParameters>]

Description

Create a BitLocker management settings policy. You configure the specific policies with other cmdlets, and then use this cmdlet to create the management policy. For more information on the specific policy cmdlets, see Related links.

Use the New-CMSettingDeployment cmdlet to deploy this setting to a collection.

Examples

Example 1: Create a BitLocker setting with some standard policies

This example creates a new BitLocker management setting with a collection of standard BitLocker policies.

$policies = @()

$policies += New-CMBLEncryptionMethodWithXts  -PolicyState Enabled -OSDriveEncryptionMethod AesXts256
$policies += New-CMBMSOSDEncryptionPolicy -PolicyState Enabled -Protector TpmOnly
$Policies += New-CMUseOsEnforcePolicy -PolicyState Enabled -GracePeriodDays 0
$Policies += New-CMBMSClientConfigureCheckIntervalPolicy -PolicyState Enabled -ClientWakeupFrequencyMinutes 9

New-CMBlmSetting -Name "BLM Settings" -Policies $policies

Parameters

-Description

Specify an optional description to better identify this policy.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-DisableWildcardHandling

This parameter treats wildcard characters as literal character values. You can't combine it with ForceWildcardHandling.

Parameter properties

Type:SwitchParameter
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-ForceWildcardHandling

This parameter processes wildcard characters and may lead to unexpected behavior (not recommended). You can't combine it with DisableWildcardHandling.

Parameter properties

Type:SwitchParameter
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-Name

Specify a name for this policy to identify it.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:True
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-Policies

Specify an array of BitLocker policies to include. For more information on the specific policy cmdlets, see Related links.

If you don't specify any policies with the -Policies parameter, the default policy is a single, not configured, OS drive encryption policy. For more information on this default policy type, see New-CMBMSOSDEncryptionPolicy.

Parameter properties

Type:

PolicyObject[]

Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

CommonParameters

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutBuffer, -OutVariable, -PipelineVariable, -ProgressAction, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

Inputs

None

Outputs

Microsoft.ConfigurationManagement.PowerShell.Cmdlets.EP.BitLockerManagement.BlmSettings