Windows 10: Installing Company MS Teams in HyperV with Bitlocker

Here is a tip for those of you wanting to use MS Teams on your PC. Many companies expect you to join a domain when using MS Teams and then you give over control of aspects of your PC.

My Company not only expects you to join a domain but also use Bitlocker. I was not prepared to do that on my personal PC but I decided to see if I could do it in a Hyper-V VM as I would only use the VM for Teams and Office 365.

The first hurdle I ran into was that if I joined a domain during setup of Windows and then tried to install Teams, my Company required me to set up a PIN which is no good for a HyperV VM. You cannot use in PIN in a HyperV VM.

However, I only need to use a Company account for MS Teams (and MS Office) without joining a Domain. Unfortunately, once I had joined the domain, too many policy restrictions were in place. So I nuked this installation and reinstalled setting up a local account.

I then ran into the next hurdle as I could not bitlock my VM C drive as it required a TPM and my laptop does not have a TPM. However, after a bit of googling, I discovered you could enable a virtual TPM in HyperV.

So I enabled the TPM, was able to enable Bitlocker and install MS Teams.

I can now use MS Teams on my PC without affecting Host.

Works perfectly.

:)

 

Using Teams in HyperV with Company domain

I have a company laptop with Teams and obviously that works fine. However, I wanted to install Teams on my personal pc and decided to use a HyperV vm to run as it needs to use a company domain and that takes over control of certain aspects.

In particular, it requires you to use a PIN of at least 6 digits.

This is where I ran into a big issue with HyperV.

I made a previous post about using HyperV with a PIN i.e. it will not use enhanced mode.

I thought this was a bug but it turns out this is BY DESIGN.

If you have a PIN, you can only use HyperV in BASIC mode which is no use for Teams as you do not get any audio!

I really thought I was screwed i.e.to use Teams for company account, I would have to join domain and install it on host accepting restrictions which I really did not want to do.

As it happens, my Company also accepts two factor account authentication for Teams but when you install and set it up, it asks you to join the domain and set pin, and then bitlocker whole drive.

However, it also gives option NOT to join a domain and only sign into Teams. I tried this and it installs and it runs ok without need for PIN or bitlocker. I cannot access my company onedrive account directly as I have not joined a domain.

However, I can still access company onedrive via MS Office 365 so no big deal just slightly less convenient. Strangely, 2FA is allowed Company for this with no need for PIN or bitlocker.

So I now have a nice VM dedicated to work use without "polluting" my main PC.

However, not being able to use HyperV and a PIN in enhanced mode is a PITA as I have to type in full password each time I run VM (and less secure in theory).

 

Need to turn off Bitlocker to install Windows 10

Hi,

We suggest doing the following steps again to resolve the issue. To complete the procedure, make sure that you have the following information:

• You must be able to provide administrative credentials.
• The drive must be BitLocker-protected.

To suspend BitLocker Drive Encryption on an operating system drive, please follow the steps below:

• Click Start, click Control Panel, click
  System and Security, and then click BitLocker Drive Encryption.
• Click Suspend Protection for the operating system drive.
• A message is displayed, informing you that your data will not be protected while BitLocker is suspended and asking if you want to suspend BitLocker Drive Encryption.
  
• Click Yes to continue and suspend BitLocker on the drive.

Let us know how it goes.

 

MS Teams utilizing high resources

Hello Team,

Recently we installed the MS Teams in Win 10 systems, after installing PCs are getting very slow and all of the systems are using high CPU utilization (100%) after login to MS Teams Desktop APP. Even after Complete Windows Update
also same issue.

Suggested to give a needful.