Hi IT Ninjas,

I wonder if anyone could give me any advice on the best way to solve a problem.  So we are deploying lots of computers which I want encrypting.  The PC's are managed via Kace 1000 v9.

So while I have Bitlocker Group Policy/Sophos Central to handle encrypting the devices I want a way to disable the encyrption during Dell Updates for items such as BIOS updates.  At present the updates to BIOS are all controlled via the Securty -> Dell Updates schedules.  I have a scripts to Suspend-Bitlocker, but I cant tie the two together.  So Ideally I would want - Suspend Bitlocker -> Update BIOS -> Resume Bitlocker.

Task Chains wont allow me to select the Dell Update schedules just the Patch Management Schedules.  

I suppose I could write a Script to deploy the Dell BIOS update via script but then I will end up with multiple scripts per model/BIOS version. 

I'm sure I'm not the only one who wants to do this, how was everyone else done it?