New-CMBlmSetting

Module:: ConfigurationManager

Create a BitLocker management settings policy.

Syntax

New-CMBlmSetting
   [-Policies <PolicyObject[]>]
   -Name <String>
   [-Description <String>]
   [-DisableWildcardHandling]
   [-ForceWildcardHandling]
   [<CommonParameters>]

Description

Create a BitLocker management settings policy. You configure the specific policies with other cmdlets, and then use this cmdlet to create the management policy. For more information on the specific policy cmdlets, see Related links.

Use the New-CMSettingDeployment cmdlet to deploy this setting to a collection.

Examples

Example 1: Create a BitLocker setting with some standard policies

This example creates a new BitLocker management setting with a collection of standard BitLocker policies.

$policies = @()

$policies += New-CMBLEncryptionMethodWithXts  -PolicyState Enabled -OSDriveEncryptionMethod AesXts256
$policies += New-CMBMSOSDEncryptionPolicy -PolicyState Enabled -Protector TpmOnly
$Policies += New-CMUseOsEnforcePolicy -PolicyState Enabled -GracePeriodDays 0
$Policies += New-CMBMSClientConfigureCheckIntervalPolicy -PolicyState Enabled -ClientWakeupFrequencyMinutes 9

New-CMBlmSetting -Name "BLM Settings" -Policies $policies

Parameters

-Description

Specify an optional description to better identify this policy.

Type:	String
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-DisableWildcardHandling

This parameter treats wildcard characters as literal character values. You can't combine it with ForceWildcardHandling.

Type:	SwitchParameter
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-ForceWildcardHandling

This parameter processes wildcard characters and may lead to unexpected behavior (not recommended). You can't combine it with DisableWildcardHandling.

Type:	SwitchParameter
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-Name

Specify a name for this policy to identify it.

Type:	String
Position:	Named
Default value:	None
Required:	True
Accept pipeline input:	False
Accept wildcard characters:	False

-Policies

Specify an array of BitLocker policies to include. For more information on the specific policy cmdlets, see Related links.

If you don't specify any policies with the -Policies parameter, the default policy is a single, not configured, OS drive encryption policy. For more information on this default policy type, see New-CMBMSOSDEncryptionPolicy.

Type:	PolicyObject[]
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

Inputs

None

Outputs

Microsoft.ConfigurationManagement.PowerShell.Cmdlets.EP.BitLockerManagement.BlmSettings