Comments on: Automatically enable Bitlocker encryption with Microsoft Intune

By: Habibz

Habibz — Thu, 07 Apr 2022 17:51:23 +0000

Thanks Peter for the clear demonstration.
I Have question in mind, How to enroll my domain joined devices?

Note:
I am having my on-prem AD and using AD Connect to replicate to Azure AD.

By: Peter Klapwijk

Peter Klapwijk — Tue, 26 Oct 2021 14:51:42 +0000

In reply to Camiel Verhelst. No, not by a policy. You end up by setting this using a PowerShell script for example.

By: Camiel Verhelst

Camiel Verhelst — Fri, 22 Oct 2021 12:00:07 +0000

Is there also a way to set a predefined Bitlocker pin through intune? Instead of having the end user setting it up?

By: Rakib

Rakib — Wed, 28 Apr 2021 13:35:22 +0000

Hi, is there a way to enable bitlocker the opposite way. From script locally to enable bitlocker for Intune, since intune saves recovery keys and such.

By: Peter Klapwijk

Peter Klapwijk — Fri, 19 Feb 2021 19:44:36 +0000

In reply to Matt. If you mean that the user's device is already encrypted, nothing should change in this.

By: Matt

Matt — Tue, 16 Feb 2021 17:12:58 +0000

Thanks for this post, it is very useful and answers the question I had!
Do you know what would happen if an existing policy that prompts the user for Bitlocker settings was changed to the one you have outlined above?

By: Peter Klapwijk

Peter Klapwijk — Wed, 13 Jan 2021 09:43:22 +0000

In reply to Guus van Berge. Hi Guus, At the moment I tested the settings from the Endpoint Protection node, not all settings which I needed could already be configured via that node. After that moment, I did another short test but wasn't really sure about a few settings. So I`m still using these settings, as I know for sure this works as expected (at least in the tenants I`m managing).

By: Guus van Berge

Guus van Berge — Wed, 06 Jan 2021 12:17:50 +0000

Hi Peter,

Thanks for another great post. I was wondering one thing. A little while now you can also configure the bitlocker in the “endpoint protection” node as well. I read somewhere that this is the new place to configure your security and that the configuration profile for bitlocker will become absolute. What is you reason for still using the config profile?

By: Niko

Niko — Wed, 16 Dec 2020 12:54:45 +0000

You can do it with Intune by deploying a powershell script to the PC’s where you want bitlocker to be removed. You can set it up from Devices -> Policy -> Scripts

By: Peter Klapwijk

Peter Klapwijk — Tue, 15 Dec 2020 21:08:51 +0000

In reply to Pablo. Hi Pablo, No, I`m not aware of that option.