What setting changes on a device when it receives a policy with PBA disabled? My organization is working on upgrading the Windows OS using SCCM. They want to know if there is a flag/setting that they can check on devices before a deployment of the OS is pushed to verify PBA is disabled.
When the push the OS update with PBA enabled it fails and the OS comes up to a repair windows screen.
All we are looking for is a way to determine on the device if PBA is Enabled/Disabled. Whether it's a registry key or a file that can be checked.
To check if there is a temporary booting, you should look for: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\McAfee EndPoint Encryption\Endpoint Encryption for PC\LogonManagedAutoboot I cannot confirm now, but values in this registry, should change if temporary booting is enabled.
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.
Community Help Hub
New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.