In my previous blog post here:

I talk about starting MBAM encryption as a part of SCCM Task Sequence, saving the key to MBAM database. Apparently, the script did not work on Surface Pro or pretty much any other tablet - it needs one more registry key under Policy\FVE - OSEnablePrebootInputProtectorsOnSlates

I added this key and it fixed the problem. The version was updated.


Thank you.