MBAM Policy Update

The Microsoft Bitlocker Administration and Monitoring (MBAM) policy for machines in the CN domain has been updated to not require a PIN by default. This has no impact on existing MBAM configurations (e.g. it isn’t going to clear out the existing PIN), but it does mean that an existing install with a PIN can be changed to a blank PIN.

As a reminder, a general overview of all our fleetwide group policy objects is available here

Duo Changes Coming Soon

The following changes are coming soon for Duo.

Duo Enrollment Required for IT Staff

Duo enrollment will be required to access the following ONID admin tools starting Monday, November 5:

  • Duo Bypass Generation Tool
  • ONID Mover
  • ONID Administrative Password Reset

The ONID Password PIN Reset tool will also require Duo enrollment in the near future.

Please note that once you enroll in Duo, you will need to use Duo whenever you login via OSU single sign on. If you would like a Duo hardware token, contact Kirsten Petersen.

Starting November 5, you will not be able to use ONID admin tools if you are not Duo-enrolled.

Distributed IT Teams Can Issue Duo Bypass for Everyone

Until recently, distributed IT teams were only able to issue Duo bypass codes for users managed by their department. Starting next week, IT teams across campus will be able to issue Duo bypass codesĀ  for any user.

What this means: If you are helping a customer who is on the other side of campus, they can potentially get help at an IT helpdesk closer to their location. Other IT teams will now also be able to assist their undergraduate students with Duo bypass.