Active Directory Bitlocker Fixed -

| Feature | Native AD | Microsoft MBAM (deprecated) | Modern: Intune/SCCM | |---------|-----------|----------------------------|----------------------| | Key escrow | ✅ | ✅ | ✅ | | Self-service portal | ❌ | ✅ | ✅ (via Company Portal) | | Compliance reporting | ❌ (manual) | ✅ | ✅ | | TPM provisioning | ❌ | ✅ | ✅ | | Rotation policies | ❌ | ✅ | ✅ |