How to turn on BitLocker on the Operating system drive The following will walk you through enabling BitLocker encryption on a Windows 10 laptop.  The article will note differences between Personal and DMU issued computers Before you Begin:   DMU Computer - Ensure you are plugged into to external power and have an active network connection either on campus or through VPN (this will ensure that the recovery key is automatically uploaded to or servers). Personal Computer - Back up your files.  Either to an external device or Cloud storage account.  If you lose your recovery key you will not be able to access any files on that computer. IMPORTANT - Saving the Recovery Key! It is crucial to have the recovery key as it will unlock the drive if something were to go wrong.  If you lose the key and/or do not have it all data on the drive/computer will be lost. DMU Computer - Computers issued and managed by DMU will automatically have the recovery key back up to our directory servers.  However, saving a copy yourself is beneficial. Personal Computer - Save a copy to your DMU OneDrive, other cloud storage, or an external location. Encrypt Drive: Click your START button and type "Bitlocker" (no quotes) Click Manage Bitlocker in the search results   When the Bitlocker control panel opens; click Turn On Bitlocker and follow the prompts    You may be required to reboot before proceeding.  If so, follow the prompts.  When your computer has rebooted and you have logged back in, bitlocker will continue where it left off. DMU Computer - This will require administrative privileges to continue.  If you are not an administrator, contact the Solutions Hub for assistance. If prompted - choose Let Bitlocker Automatically Unlock My Drive Save the recovery key and Click Next DMU Computer - You should be able to click Next without manually saving the recovery key.  If you cannot, please save the key to a file and notify the Solutions Hub. Take default options for the 2 following screens     - Choose encryption mode to use     - Are you ready (You can bypass the bitlocker system check. )   The encryption process will be begin and can be minimized (if not done automatically).  You can use the computer as normal during this time. You can check the status of the encryption by clicking the icon in system tray  Verify Recovery Key is Saved If you lose your recovery key and/or do not have a copy sent to the Solutions Hub and something goes wrong, you will lose access to all data on the drive.  Personal Computer - open the location you saved the recovery key file to and verify the file exists.   Your file name will be different than the one shown.

This article will walk you through how to use OneDrive to sync/manage your MS Teams files. This article assumes: You are using a Windows 10 computer with OneDrive already installed You already have MS Teams installed - (https://www.microsoft.com/en-ww/microsoft-365/microsoft-teams/download-app) You have membership to the team You have the appropriate permissions to view/edit the files for that team Open Microsoft Teams Navigate to the appropriate Team using the Teams button on the left Click Files option from the top menu bar Click Open in Sharepoint - This will open the Team site in your web browser. When the browser opens the Team site: Click the Sync option from the top menu bar Click Sync Now in the next window You will be prompted to allow this to open OneDrive, click Open Microsoft OneDrive You will now see the Team files in File Explorer under a heading called "Des Moines University"

You may be experiencing an issue where Biolucida is displaying extremely small text / graphics.  This can occur on Windows 10 computers that have a very screen resolution (2k, 4k, etc...). Example: The solution is to adjust the DPI settings for the program in Windows. 1. Right-Click the Biolucida shortcut and go to Properties 2. Click the Compatibility tab 3. Click Change Settings for All Users 4. Click Change High DPI Settings 5. Check the box for High DPI Scaling Overide 6. Change drop down value to System 7. Click OK, then OK again.   8. Close any remaining windows

This article will walk you through how to map a network share to your Windows 10 computer. 1. Click START and type “This PC” (no quotes) and press Enter  2. At the top of the Explorer window that opens, click on the Computer tab 3. Click on the Map Network Drive drop-down menu and “Map Network Drive.” 4. Select the drive letter an unused letter from the drop-down list ---- It is recommended not to use letters A - G  5. In the Folder field, type the path to the share \\[server]\[share] 6. Click Finish  

If you have multiple audio devices connected to your laptop or docking station you may need to select which one to use if audio is playing on the wrong device. Follow these steps to select your audio playback device. 1. Find the Audio Icon on your task bar. It will be in the system tray near the clock. 2. Click the arrow to expand the menu. 3. Select our audio device from the list.

This document will walk you through using Process Monitor to capture computer events for troubleshooting.  You should only install Process Monitor at the direction of the Solutions Hub. If you have any questions please let us know.   STEP A:  Prepare Your Computer Process Monitor will gather information on all computer processes (both relevant and not).  In order to get a clear picture of what is happening we need to prepare your computer: Close all non-essential programs  non-essential relative to the problem we are troubleshooting Once done, we need to setup the Process Monitor software.   STEP B: Open and Prepare Process Monitor Prepare Process Monitor (procmon) Double-Click to open the program Click Yes to allow it to run. Click Agree (if prompted) Press CTRL + E or click the File Menu > Capture Events (turns off capturing) Press CTRL + X or click the Edit Menu > Clear Display (erases all current events) Now you are set to recreate the problem and capture events.   STEP C: Running Process Monitor Press CTRL + E or click the File Menu > Capture Events (turns on capturing) Now you can open the program or attempt to recreate the problem we are troubleshooting Once the problem is recreated stop what you are doing and save the logs. DO NOT REBOOT – if the computer is stuck contact the Solutions Hub or your specific troubleshooting agent. Press CTRL + E or click the File Menu > Capture Events (turns on capturing)   STEP D: Saving the Logs Go back to the Process Monitor program: Press CTRL + S or click the File Menu > Save In the Save window select the following options: All Events Native Process Monitor Format Give the file a name and Click OK. Email that file to the Solutions Hub (or your specific troubleshooting contact)

In order to keep our end-user devices safe from malware and other intrusions local administrator privileges are being/have been removed from laptops, desktops, etc.  The following article will provide information regarding what to expect and what you can do should you need administrator rights to your computer.  What are administrator rights/privileges/permissions? Administrators are user accounts on a Windows computer that has access to all files, folders, programs, and system areas of the Windows.   What if I have software that needs administrator permissions to run? We understand that some software requires elevation (administrator privileges).  We are allowing exceptions, however you will need to justify the reasoning. I need to install software on my computer, how can I do that without administrator permissions? Most software allows you to install it without administrator permissions, so you should try installing it first. If you must use administrator permissions to install the software, contact the Solutions Hub.  All Solutions Hub agents have permissions to install software. -----------

This article will walk you through how to use the "Run with elevated access" option in Windows to run or install, programs, that require administrator privileges. Limitations: Currently only works on .exe (executable) files.  If the file is not a .exe you can contact the Solutions Hub for assistance. Only available on DMU issued and Managed computers 1.  Right-Click on the file 2.  Click "Run with elevated access" 3.  Enter the justification and click Continue 4.  Sign in with your DMU credentials (students will need to use their UPN [username]@student.dmu.edu).

This will walk through using the "Run With Elevated Access" option to allow a standard user (non-admin) to suspend Bitlocker encryption so the system can run updates. This is broken down into two parts: A. Create a Shortcut and B. Run the Command IMPORTANT:  The suspension of Bitlocker is automatically resumed after each restart of the computer. A. Create a Shortcut: 1. Right-Click on your desktop > Choose New and Shortcut 2. Copy/Paste or Type %comspec% in the location field and click NEXT 3. Click Finish B.  Run the Command 1. Right-Click on the shortcut you just created and choose Run with elevated access. 2. Enter a justification when prompted.  You can use "Suspending Bitlocker for updates," then click Continue 3. Enter your DMU password click OK. This will open the command prompt window. 4. Type or Copy/Paste the following command and press Enter. manage-bde -protectors -disable c: If successful, you will see that key protectors are disabled.

When updating Windows, either with monthly updates or feature/version updates you may run into a problem that says "We couldn't update the system reserved partition." Cause: There is not enough free space in the system partition to perform the upgrade. (This is SYSTEM partition, NOT free space of your C: drive). Solution: Delete unnecessary files from the system partition. Steps to solve are below. Your results should look similar to those in the screenshot. If you are unsure of any of the steps please contact the Solutions Hub. Follow the steps below and press Enter after each step that says type: Assign Drive Letter to System Partition 1. Open elevated command prompt 2. type Diskpart 3. type List Disk to find the disk number of the primary hard drive (usually Disk 0) 4. type Select Disk # (# is the number of the of disk ("select disk 0") 5. type List Partition to find the 100mb system reserved partition (usually Partition 1) 6. type Select Partition # (# is the number of the partition ("select partition 1" 7. type Assign Letter=Z (or any other unused letter from H to Z) 8. type Exit to exit out of diskpart. Delete Files In the normal elevated command prompt: 9. type Z: (Z is the letter assigned in step 7) 10. type CD Z:\efi\microsoft\boot (Z is the letter assigned in step 7) 11. type del fonts\* 12. type Y when prompted Remove Drive Letter 13. type Diskpart 14. type Select Disk # (# is the primary disk number (same as step 2) 15. type Select Partition # (# is the number of the system partition (same as step 6) 16. type Remove Letter=Z (Z is the letter assigned in step 7) 17. type Exit 18. Reboot the computer