Hello, I have the following question: If I encrypt the OS of a computer with MBAM BitLocker and use TPM+PIN as protector, is it possible to change the protector after the encryption finished? For example to TPM only? Best regards, Renate

Hello, I found a solution: change the MBAM group policy, so that the protector for the drive is "TPM only" instead of "TPM and PIN"load the new group policy change the protector: start the command line and enter the following:manage-bde -protectors -disable C:manage-bde -protectors -delete C: -type TPMAndPINmanage-bde -protectors -add C: -tpmmanage-bde -protectors -enable C: Best regards, Renate