Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

BitLocker variables

Expand
titlegsDrivesToEncrypt / gsDrivesToDecrypt

The variable value can be All or System

Default setting = All (recommended)

All = All fixed drives are encrypted/decrypted

System = Only the operating system drive is encrypted/decrypted

Expand
titlegbFailPackageOnError

The variable value can be True or False

Default setting = False (recommended)

True = Package Status will be set to Failed in the CapaInstaller Console, when the first non-critical error is detected

False = Package status will be set to Installed in the CapaInstaller Console, when non-critical errors are detected

In the examplebelow, an error is written to the logfile, because gbFailPackageOnError is set to True

In the example below, a warning is written to the logfile, because gbFailPackageOnError is set to False

Expand
titlegbMaskSensitiveData

The variable value can be True or False

Default setting = True (recommended)

True = The last 4 digits of the Recovery Key ID and the Recovery Key Password is replaced with asterisk characters in the log file located on the endpoint

False = The full value of the Recovery Key ID and the Recovery Key Password is visible in the log file located on the endpoint

Expand
titlegbSaveRecoveryKeyInActiveDirectory

The variable value can be True or False

Default setting = True (recommended)

True = Recovery Key is saved in Active Directory

False = Recovery Key is not saved in Active Directory

(lightbulb) CapaBitLocker automatically detects if the domain is availabe before saving the recovery key in Active Directory

Expand
titlegbSaveRecoveryKeyInCapaInstaller

The variable value can be True or False

Default setting = True (recommended)

True = Recovery Key is saved in CapaInstaller Custom Inventory

False = Recovery Key is not saved in CapaInstaller Custom Inventory

Expand
titlegbWaitForEncryptionToComplete / gbWaitForDecryptionToComplete

The variable value can be True or False

Default setting = True

True = Package will wait for encryption of drives to finish, before changing status to Installed

False = Package will initiate encryption of drives and change status to Installed afterwards

(lightbulb) All recovery keys are saved and auto-unlock on data drives are enabled, immediately after drive encryption has been initiated

...

Common variables

Expand
titlegsIpAddressesToExclude

The variable value can be a full or a partial IPv4 address on endpoints that should be excluded

Default setting = ""

The * character must be used as a wildcard, when defining partial IPv4 addresses

The , character must be used when defining multiple IPv4 addresses

Example : 192.168.100.*,192.168.101.*

Expand
titlegsGatewayAddressesToExclude

The variable value can be a full or a partial IPv4 address on gateways that should be excluded

Default setting = ""

The * character must be used as a wildcard, when defining partial IPv4 addresses

The , character must be used when defining multiple IPv4 addresses

Example : 192.168.100.*,192.168.101.*

Expand
titlegsDeviceNamesToExclude

The variable value can be the NetBIOS name of endpoints that should be excluded

Default setting = ""

The , character must be used when defining multiple endpoints

Expand
titlegsHardwareModelsToExclude

The variable value can be the name of the hardware models that should be excluded

Default setting = ""

The hardware model name is matched with the “System Model” value from the “SysInfo” command

The , character must be used when defining multiple endpoints

Expand
titlegbRequirePowerConnection

The variable value can be True or False

Default setting = True

True = External power connection is required

False = External power connection is not required

(lightbulb) This setting only affects laptops

Expand
titlegbDisableCustomInventoryCollection

The variable value can be True or False

Default setting = False

True = Custom inventory is not collected during package exection (not recommended)

False = Custom inventory is collected during package execution

...