Director IM/IT at Sustainable Development Technology Canada
Real User
Encryption that provides protection that is ideal for our cloud-based environment
Pros and Cons
  • "The most valuable feature is the simplicity and integration with the Microsoft Clouds platform."
  • "I would like to be able to encrypt our cloud tenancy."

What is our primary use case?

The primary use case of this solution is to encrypt all of our laptops. If they are ever lost then they are useless to anybody, unless they have the key. 

Our keys are stored in our Active Directory, making it impossible for anyone to decrypt what we have in our devices.

What is most valuable?

The most valuable feature is the simplicity and integration with the Microsoft Clouds platform. I can store the keys to the devices kept in my Active Directory in Microsoft Azure.

What needs improvement?

In the next generation, it could have a higher level of encryption.

I would like to be able to encrypt our cloud tenancy.

I would like to have the ability to encrypt a cloud-based server with BitLocker.

For how long have I used the solution?

I have been using this solution for six months.

Buyer's Guide
Microsoft BitLocker
April 2024
Learn what your peers think about Microsoft BitLocker. Get advice and tips from experienced pros sharing their opinions. Updated: April 2024.
769,599 professionals have used our research since 2012.

What do I think about the stability of the solution?

The stability is fine. It has no impact on performance or negligible impact on performance. No one notices.

What do I think about the scalability of the solution?

The scalability is essentially unlimited.

We have 60 users who are everyone from the CEO to the standard line worker.

Everyone in our organization is encrypted with BitLocker, in addition to all of our devices. 

All of our laptops, PCs, and all of our interactive devices are encrypted with BitLocker.

How are customer service and support?

I have contacted Microsoft technical support for other issues and they are very responsive and very quick to follow up. 

Solutions are not always there, but I find Microsoft support reasonable.

I haven't needed technical support for BitLocker.

Which solution did I use previously and why did I switch?

There was no other solution in place. We deployed BitLocker because it fits within our strategy for the environment that we were building, which is a no-infrastructure infrastructure.

How was the initial setup?

The initial setup was very simple.

We expected that the devices had to encrypt themselves once we initiated BitLocker.

Deploying them and having the encryption run only took a few days to implement. This was all being done in the background and no one was impacted while they worked.

We only need one staff member for deployment and no one for maintenance, as it is auto-updating from the Microsoft Cloud.

What about the implementation team?

We implemented this solution internally. 

What's my experience with pricing, setup cost, and licensing?

The cost of this solution is bundled in with part of the subscription for the Microsoft Cloud. 

We have users subscribed to Enterprise E5 and it comes with E5.

Which other solutions did I evaluate?

We researched a few websites for comparative encryption, but we didn't want to introduce another vendor. BitLocker satisfied all of the criteria that we had. We don't need any military-grade or any military level or anything beyond those capabilities.

What other advice do I have?

We have no infrastructure. Everything we have, our entire infrastructure, has moved and it's in the Microsoft Azure cloud.

This solution does everything that we need it to do. It is very convenient and it fits into our strategy of having everything in a homogeneous Microsoft Cloud. 

It is difficult to rate anything a ten as there may be future bugs or features that may be introduced, or if someone can discover how to hack it. At this time, we feel very safe and very covered with the encryption levels that we have with BitLocker.

I would rate this solution an eight out of ten.

Which deployment model are you using for this solution?

Public Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Microsoft Azure
Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
TAYIM Henri - PeerSpot reviewer
System Administrator at a transportation company with 10,001+ employees
Real User
Fast remote deployment, reliable, and free
Pros and Cons
  • "You can do a silent remote deployment very fast."
  • "The solution could improve by having a centralized GUI for management."

What is our primary use case?

We used Microsoft BitLocker to protect our laptops from theft. We have auditors that come and check to see the security of our systems and with this solution we are secure.

What needs improvement?

The solution could improve by having a centralized GUI for management.

For how long have I used the solution?

I used Microsoft BitLocker within the past 12 months.

What do I think about the stability of the solution?

Microsoft BitLocker is stable.

How was the initial setup?

I have a very small project and I implemented Microsoft BitLocker using GPO. Previously, we deploy Microsoft BitLocker using MBAM.

You can do a silent remote deployment very fast.

What's my experience with pricing, setup cost, and licensing?

Microsoft BitLocker is a free feature when you are using Microsoft solutions.

What other advice do I have?

I could advise any company to then deploy Microsoft BitLocker, first of all, because the product is free and the end user's computer performance is not affected. There are some products that when you install it on the end user's system, their system can become very slow.

I rate Microsoft BitLocker an eight out of ten.

Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
Buyer's Guide
Microsoft BitLocker
April 2024
Learn what your peers think about Microsoft BitLocker. Get advice and tips from experienced pros sharing their opinions. Updated: April 2024.
769,599 professionals have used our research since 2012.
Director, Cryptographic Engineering at a financial services firm with 10,001+ employees
Real User
Stable with good encryption but unsure if it protects the hard drive of stolen laptops
Pros and Cons
  • "The hard drive encryption is very good."
  • "It's possible that the time it takes to pull items in to BitLocker could be reduced a bit."

What is our primary use case?

BitLocker is a feature of which enables hard drive encryption. It's similar to Symantec Endpoint Encryption. For us, both go hand-in-hand, however, BitLocker has an advantage in that it stores the key in TPM. 

What is most valuable?

The hard drive encryption is very good.

What needs improvement?

Right now, the problem for us is, if a laptop is stolen, how they address it with the hard drive if it is already protected in BitLocker? We cannot protect anything until we have a centralized server feed where w can get all the information from all the laptop and the device if it does get stolen. Currently, to solve this, we are using a solution called Unbound.

I'm a hardcore developer. I don't know whether the solution has any source files. That said, I don't see anything that's really lacking, feature-wise. 

It's possible that the time it takes to pull items in to BitLocker could be reduced a bit. It can take a long time - sometimes up to 90 minutes.

For how long have I used the solution?

I've been using the solution since I started working for my current company. I haven't been with them for so long and therefore haven't been working with the solution for too long just yet.

What do I think about the stability of the solution?

We have about 80,000 laptops and an encryption rate of approximately 99%. The stability seems to be pretty good.

What do I think about the scalability of the solution?

I haven't attempted to scale the solution. I wouldn't be able to properly discuss how scalable it is at this time.

Currently, we have the solution on approximately 80,000 laptops.

I'm not sure if we will increase usage. I'm actually considering changing the solution in the near future.

How are customer service and technical support?

I haven't really had any contact with technical support. Since I've never used them, I can't really discuss if they are responsive or knowledgable. Right now, my sole purpose is to look for an alternative to Unbound, and therefore I don't work too much with BitLocker troubleshooting.

How was the initial setup?

I didn't handle the initial setup. It would be impossible for me to discuss the process or to talk about if it is difficult or straightforward. I didn't handle any aspect of the implementation.

What's my experience with pricing, setup cost, and licensing?

I'm not really involved in the pricing aspect of the solution. I don't know if it is expensive or reasonably priced.

What other advice do I have?

I essentially joined the company and since I got here all the laptops and endpoints have been encrypted using BitLocker. We are using IBM as management for all the data and to stop Microsoft from taking away Unbound support.

We are looking for an alternative. We're curious about Symantec or endpoint encryptions that I can use with BitLocker, on top of the Symantec client that I have. 

We're using the latest version of the solution, from what I understand. We load the solution directly onto laptops.

I would recommend the solution. However, if I find another endpoint solution, I may switch. I'm not tied to this product.

I don't have a lot of experience on the solution just yet. I'm still evaluating it in a lot of ways, and discovering the features.

I'd rate the solution seven out of ten.

Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
it_user757422 - PeerSpot reviewer
Microsoft (Active Directory) Consultant at a logistics company with 5,001-10,000 employees
Consultant
Prevents Unauthorised Access to Corporate Data

What is our primary use case?

Protect corporate data on devices (Laptops, Desktops, Tablets).
every week 100's of corporate devices lost just at airports and every device got personal/corporate data, its very important to protect such data from unauthorised use, hence is the solution to implement Microsoft Bitlocker Administration and Monitoring (MBAM)

How has it helped my organization?

I delivered three projects where the business does not have any encryption mechanism in place if the company or an employee lost any of the device, there are chances someone could view sensitive data. After the Microsoft BitLocker Administration and Monitoring (MBAM) implementation, in such cases, any unauthorised person will not be able to access the data.

If you already have older version of MBAM in place, there is an option to move existing keys over to new server which is great.

What is most valuable?

All keys stored centerally in database (SQL), option to have PIN / Enhanced PIN / USB Drives.

What needs improvement?

Microsoft Bitlocker Administration and Monitoring (MBAM) is one of the best solution available in the marekt to protect corporate data

For how long have I used the solution?

More than five years.

What do I think about the stability of the solution?

Since it is a Microsoft product, there are no compatibility issues. Once planned well, it is a straightforward implementation.

What do I think about the scalability of the solution?

No issues.

How are customer service and technical support?

There is not much support unless a business has got a Premier support contract in place.

Which solution did I use previously and why did I switch?

MBAM is the only solution that I have used for encryption.

How was the initial setup?

You need to know the technical aspects and have a good understanding of Microsoft Client/Server OS. If you know that, then yes, it is pretty straightforward.

What was our ROI?

Well worth and perfect solution specially align with GDPR.

What's my experience with pricing, setup cost, and licensing?

It is part of Microsoft Desktop Optimization Pack (MDOP) and economical compare to similar products.

Which other solutions did I evaluate?

No, we do not.

What other advice do I have?

Look at TechNet for relevant documentation and test many times before implementing in your production environment.

Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
Associate at a consultancy with 201-500 employees
Real User
Top 20
Data protection and encryption solution that offers excellent customer support and performance stability
Pros and Cons
  • "Being able to encrypt an entire hard disk has been most valuable."
  • "The solution could be improved if it was more user friendly."

What is our primary use case?

We use this solution to protect our data in the event that it is stolen or a laptop goes missing. We make use of the encryption scheme.

What is most valuable?

Being able to encrypt an entire hard disk has been most valuable.

What needs improvement?

The solution could be improved if it was more user friendly. 

For how long have I used the solution?

We have been using this solution for three years.

What do I think about the stability of the solution?

This is a stable solution. 

How are customer service and support?

The customer service for this solution is excellent. I would rate it a five out of five. 

How would you rate customer service and support?

Positive

How was the initial setup?

The initial setup is not difficult. You can set it up using policy levels. The pilot testing took less than one week.

What other advice do I have?

I would recommend this solution to others. The best feature is that we can secure organization data using folder encryption. 

I would rate this solution a ten out of ten.

Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
MohamedKhairy - PeerSpot reviewer
Co-Founder & Enterprise Solutions Architect at Qtopia Tech. Solutions
Real User
Top 20Leaderboard
Easy to use and easy to recover someone's privacy
Pros and Cons
  • "It is easy to use. It is usually easy to recover someone's privacy. The manageability is much easier than McAfee. I think that Microsoft is a leader in this area. We are in the Microsoft school so our judgment of McAfee will be a little bit unfair as we recommend Microsoft all the time because of the easy manageability and support. I think that McAfee is designed for a different customer and every time we open a ticket with their support, it takes a very, very long time. The main difference is just the manageability and support. In terms of the solution itself or the functionality, I know that McAfee is very strong, but manageability and support, for us, is much more important. It's strengthens the solution for us."
  • "If integration with Active Directory are not mandatory for him, I think that there are many other solutions in the market that equal or are much stronger than Microsoft."

What is most valuable?

It is easy to use. It is usually easy to recover someone's privacy. The manageability is much easier than McAfee. I think that Microsoft is a leader in this area. We are in the Microsoft school so our judgment of McAfee will be a little bit unfair as we recommend Microsoft all the time because of the easy manageability and support. I think that McAfee is designed for a different customer and every time we open a ticket with their support, it takes a very, very long time. The main difference is just the manageability and support. In terms of the solution itself or the functionality, I know that McAfee is very strong, but manageability and support, for us, is much more important. It strengthens the solution for us.

For how long have I used the solution?

We've been using this solution for almost six years.

What do I think about the stability of the solution?

The solution is very stable. I think that it's easy to start.

What do I think about the scalability of the solution?

We tested with 300 users to date. The maximum deployment with it is for 300 users. That is not too much, but we are trying to scale it up. I don't think that we'll have a problem because it's the count for minimum deployment for Microsoft to support is already 5,000. I think that it can scale up to 5,000 without much hardware needed.

How was the initial setup?

It is usually based on the number of computers and how this will be leveraged by the user. A normal project takes from one to two months, depending on the numbers. These numbers are read on the different departments and different mindsets of the users, in order to convince them to start correcting their data and explain to them that you will force a policy that will have an impact on their laptops. Afterward, encourage them in how this is chiefly for them. Usually, it takes a month or two months maximum.

What's my experience with pricing, setup cost, and licensing?

It's not about pricing, because we are working with Enterprise companies that already have Windows Enterprise, so BitLocker comes already included as a Windows feature. It's free for Enterprise users. The price is only for deployment. The customer will pay for McAfee, however.

Which other solutions did I evaluate?

We are a partner for Microsoft here in Saudi Arabia, and one of our customers is interested in deploying Microsoft BitLocker to secure his computer devices and laptops, to encrypt all his data for hard disks, etc. I am already moving to read some documents and have some comparison between McAfee and BitLocker in order to convince the customer to install Microsoft BitLocker because from our insight we see that Microsoft BitLocker is much better than McAfee. That's why I was in need a document just to have a comparison between McAfee and Microsoft BitLocker.

From my point of view, Microsoft is much easier than McAfee. It is easy to deploy and integrate with Active Directory. Then, you have much more integration capabilities than McAfee. Microsoft is stronger and the integration between Microsoft ESP and all other Bit solutions is much better than McAfee. McAfee is a standalone solution right now that will not be efficient for the protection that we are aiming for. We need protection that integrates with all kinds of malware protection solutions. I think that Microsoft BitLocker is much better than McAfee.

What other advice do I have?

If anyone is looking for integration solutions and has a requirement related to integration between Active Directory and integration solutions, I think that he needs to strongly go to Microsoft BitLocker. If integration with Active Directory is not mandatory for him, I think that there are many other solutions in the market that equal or are much stronger than Microsoft.

I would give this solution an eight out of ten. In order to make it 9 or 10, I think that Microsoft would need to work on the desktop optimization deck that is coming with Microsoft to make the deployment much easier than what it is right now. Deployment is okay. As a partner, we can work on it without any issues, but some customers face issues deploying it by themselves because of the difficulty of understanding all of the requirements. The solution is very good and it is manageable for partners, because of their technical value or technical effort. For the level one customer help desk or administrator, however, it's not as easy. They should work on this part and make the deployment much easier.

Which deployment model are you using for this solution?

On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
PeerSpot user
Info Sec Consultant at Size 41 Digital
Real User
Top 5
Bitlocker - defence in depth

Understanding your responsibilities for disaster recovery at a departmental level can be difficult; IT departments are holistic entities. We deal with systems, people, security, servers and infrastructure... but we also need to think about things at a granular level so we can ready ourselves for when a terrible system failure occurs - it always will.

My problem was that we needed to ensure we had a very basic form of disaster recovery for our staff who were planning an event that gave us the biggest turnover of our year. Okay, so, our staff needed to take business critical information out of the office on something they could access individually. Yes, we could have used cloud storage but the staff needed full portability and access with or without the internet. Not to make a mountain out of a mole hill - USB keys.

I know. USB keys. Oddly they seem very fond of train seats and restaurant chairs because we keep hearing about them being found everywhere with private information on them.I think we're all agreed that - in the wrong hands - USB keys can be a bit of a nightmare. Of course, in the right hands they can be a nifty thing but the password must be strong enough,. It also shouldn't be able to be changed by staff.

Here we have a solution to the problem of securing drives in easy reach - Bitlocker. I literally can't think of an easier product to use. Click. Choose a couple of options or leave them as the default. Save. Done. I’m not underplaying this, it really is simple.

The aim of the game is to provide security against thefts that are spur of the moment, or people finding items that are lost; no-one wants to be the government department that loses a USB key full of people's NI numbers. We need to show due diligence in securing the storage devices that will be leaving the office.

How does it all work? 

Bitlocker uses TPM (Trusted Platform Module) but can be used without it via a small change from the sys admin of your org (probably you)

And it really is quite simple: 


It comes with a recovery key that the IT dept can keep a hold of in case the password is forgotten.To reiterate, it's included in some Windows software so free. When working for charities this is a great bonus especially if they insist on USB drives even though we all know they are a real risk to info getting out into the open. 

So, Bitlocker is designed to secure your drives (even removable ones) in an easy fashion. Does it do that? Yes, very much so. Is it easy to use? I’m not sure they could have made it easier.

 Is it secure? Secure enough from situational thieves and unskilled (in hacking) malicious current/ex-staff.

Did I find any bad points? To be honest, no. Job done. Bitlocker for securing drives, especially USB drives that leave the office. If you need something stronger then the drive probably shouldn't be leaving the office in the first place.

Disclosure: I am a real user, and this review is based on my own experience and opinions.
PeerSpot user
Darren Chaker - PeerSpot reviewer
Darren ChakerOperator at Halliburton
Real User

By Darren Chaker : I would extend full drive encryption for not only USB, but also external drives too. Simply imagine whatever data you have is lost or subject to a competitors possession, and the residual harm that would ensue. Information security must be part of the work environment, and being proactive is the only way to accomplish this.

See all 2 comments
Milan Turinic - PeerSpot reviewer
IT manager at Milan Turinič
Real User
Top 20
A High-Performing Solution to mitigate Unauthorized Data Access on lost or Stolen Computers
Pros and Cons
  • "It is an encryption tool and provides security."
  • "They can improve the security of the application and include an encryption disk in the next feature."

What is most valuable?

It is an encryption tool and provides security.               

What needs improvement?


They can improve the security of the application and include an encryption disk in the next feature.

For how long have I used the solution?

I have been using Microsoft BitLocker for the last two years.

What do I think about the stability of the solution?

The stability is satisfactory but I would rate it eight out of ten.

What do I think about the scalability of the solution?


I would rate the scalability of Microsoft BitLocker eight out of ten.

How are customer service and support?

I have never contacted support myself, but they are extremely well-supported.

How would you rate customer service and support?

Positive

How was the initial setup?


I am not in the admin position but the solution is easy to install.

What other advice do I have?

I would rate the overall product eight out of ten. 

Disclosure: I am a real user, and this review is based on my own experience and opinions.
Flag as inappropriate
PeerSpot user
Buyer's Guide
Download our free Microsoft BitLocker Report and get advice and tips from experienced pros sharing their opinions.
Updated: April 2024
Buyer's Guide
Download our free Microsoft BitLocker Report and get advice and tips from experienced pros sharing their opinions.