When recovering a drive from within Microsoft BitLocker Administration and Monitoring (MBAM), why are you asked for a reason for recovering the drive?

Question

When choosing to decrypt a drive via MBAM, I've noticed a combo box that asks the user to choose a reason for decryption - several possible options are listed including a lost PIN. What's the relevance of asking this question - are the decryption reasons stored somewhere central and possible for administrators to view?

score 1 · Accepted Answer · answered Apr 05 '20 at 17:49

1

The only reason is: audit.

You can see the reasons in the audit database, using the reports :

By the way, don't forget that support for MBAM 2.5 SP1 will end in April 2026 and will be replaced by Configuration Manager, on-premises.

answered Apr 05 '20 at 17:49

Swisstone

6,725
7
22
32

When recovering a drive from within Microsoft BitLocker Administration and Monitoring (MBAM), why are you asked for a reason for recovering the drive?

1 Answers1