Digant Gupta

The project is to explore Bitlocker tool to perform in-place technology change from McAfee Drive encryption to Bitlocker in Windows 10/11 Clients.

• Enabled Bitlocker in SCCM Console.
• Defined Bitlocker Fixed/Removable Drive Encryption polices.
• Conducted Proof of Concept.
• Created plan to replace McAfee Drive encryption and client with Bitlocker encryption.
• Extended SCCM hardware inventory to capture the McAfee registry keys.
• Created SCCM query based collection to automate the in-place technology change in end-points.
• Created Tag with criteria based policy in McAfee(Trellix) console to initiate the McAfee disk decryption.
• Planned pilot phase for testing.
• Currently, performing phase wise implementation to replace circa 4000 end-points from McAfee to Bitlocker.

The project is to consolidate 3 individual End Point Configuration Environments and build a single On-Premises Endpoint Configuration Environment (SCCM) to host Windows 10 and Windows Server 2016/2019 endpoints for 7 different Tenants hosted in individual domains.

• Organised multiple workshops to gather organization's requirements and goals for SCCM infrastructure.
• Assessed the existing infrastructure to define in-scope endpoints.
• Built Windows Severs 2019 for SCCM Infrastructure.
• Coordinated with Network team to finalize Firewall template required for communication among SCCM Site System, Site Servers and Clients.
• Extended Active Directory Schema.
• Coordinated with SQL team for SQL server installation and database creation required for SCCM.
• Created service accounts SCCM installation and configuration of SCCM services.
• Installed SCCM Console, Distribution Points, Management Points, Reporting Service, Service Connection, Fallback Point and Software Update Points.
• Configured Discovery methods, boundaries, boundary groups.
• Configured Group policy for Client installation.
• Defined RBAC to grant SCCM access and objects permissions.
• Created Compliance Polices, Application Deployment and Machine collection processes.
• Defined process for Testing, Pilot and Full deployment of patches, new application, vulnerability management.
• Created Distribution Point Groups for each Tenant.
• Defined Software Update process and configured ADRs for Monthly Patches Deployment.
• Created Custom Hardware Inventories and Reports.
• Configured the SCCM to incorporate Disaster Recoveries.
• Created Windows 10 OS deployment and application deployment Task Sequences.
• Conducted training sessions for Offshore Team.
• Created Standard Operating Process.

The project was to upgrade the back-end Windows Operating Servers hosting circa 200 published application and 15 PVS Xendesktops.

• Conducted workshop with client to analyse 200 published application and define the final in-scope list for the migration.
• Outlined the plan to logically divide the application targeting the delivery groups.
• Created Server and User level Group Policies inline with CIS Compliance.
• Created Ivanti personalisation polices.
• Created Citrix policies from Studio console.
• Hardened PVS booted Master Image for each Citrix Delivery Group and configured the image to manage them from SCCM console.
• Application deployment using SCCM Task Sequence in each Golden Master.
• Published application using Active Directory groups and conducted testing, pilot and full deployment phase for each application.
• Attended regular meetings with clients to provide project update.
• Created Standard Operating Process document and provided training to team members.

• Manages OS deployment in Windows 7/10 endpoints.
• McAfee Antivirus management in endpoints.
• Created McAfee Disk encryption, ENS, Web browser and client installation policies.
• Managed multiple critical and escalated tickets.
• Applications, Antivirus deployment, zero-day patch Management, distribution of monthly security updates on workstation using SCCM 2012 and CA Unicenter.
• Group policy and Active Directory management for Windows 10 and 2012 Operating systems.
• Installed, configured and managed DNS and DHCP servers.
• Configured JAWS and Braille for visually impaired users.