Comments on: Windows 10 Failed to enable Silent Encryption https://inthecloud247.com/windows-10-failed-to-enable-silent-encryption/ Intune, Windows, Office 365, Microsoft 365, Azure, Automation Fri, 13 Dec 2019 14:31:00 +0000 hourly 1 By: Zeek Mowbray-Bower https://inthecloud247.com/windows-10-failed-to-enable-silent-encryption/#comment-74314 Fri, 13 Dec 2019 14:31:00 +0000 https://inthecloud247.com/?p=2018#comment-74314 Oh and another thing.. Major windows updates, unabashed, disable Bitlocker.
Worse, the updates fail, and in some cases leave the computer with Bitlocker suspended.

I first saw this notice in the bitlocker logs trying to figure out why this was happening.

]]> By: Zeek Mowbray-Bower https://inthecloud247.com/windows-10-failed-to-enable-silent-encryption/#comment-74312 Fri, 13 Dec 2019 14:24:20 +0000 https://inthecloud247.com/?p=2018#comment-74312 I’ve been running into this issue quite a bit at my work place.
Secure boot is annoying. If someone leaves a USB plugged in, they will be presented with Bitlocker recovery. What should be done is setting which protectors are used for Bitlocker via group policy. I stumbled on this page when I was looking for which they were.

There’s a requirement for Secure-boot with TPM 2.0 I think.

There’s also an issue with some Lenovo machines that require a TPM chip firmware update to work correctly.

]]> By: Peter Klapwijk https://inthecloud247.com/windows-10-failed-to-enable-silent-encryption/#comment-53604 Thu, 30 May 2019 10:15:01 +0000 https://inthecloud247.com/?p=2018#comment-53604 You`re not running the latest build, give installing kb4497934 a try. That article mentions fixing a Bitlocker issue.

]]> By: Seng Phearin https://inthecloud247.com/windows-10-failed-to-enable-silent-encryption/#comment-53582 Wed, 29 May 2019 07:39:59 +0000 https://inthecloud247.com/?p=2018#comment-53582 In reply to Peter Klapwijk.

Hi Peter,

I have browsed to some KB files especially the version that I am currently running, yet I didn’t find what they say about the issue I had. Version 1809 (OS Build 17763.437).

Any solutions to resolve it?

Thanks,
Phearin

]]> By: Peter Klapwijk https://inthecloud247.com/windows-10-failed-to-enable-silent-encryption/#comment-53581 Wed, 29 May 2019 06:41:24 +0000 https://inthecloud247.com/?p=2018#comment-53581 In reply to Seng Phearin.

Hi Seng,

Yes there was an known issue with 1809 not encrypting. Maybe that will fix your problem.
Have a look at this KB: https://support.microsoft.com/en-us/help/4497934/windows-10-update-kb4497934

Regards,

Peter

]]> By: Seng Phearin https://inthecloud247.com/windows-10-failed-to-enable-silent-encryption/#comment-53571 Wed, 29 May 2019 02:22:31 +0000 https://inthecloud247.com/?p=2018#comment-53571 Hi Peter,

We are now running on Windows 10 1809, Azure AD joined, Intune cloud only. At this customer the users are admin on the laptop, but everything is fully automated, no user action taken to start BitLocker.

However, we faced issue related to BitLocker won’t silently installed. It happens on Lenovo x280. Could you share some experiences related to the problem? what would be root cause?

But within same model x280 if we install with Windows 10 1803 then the silent BitLocker encryption is working fine.

Thanks,
Phearin

]]> By: Peter Klapwijk https://inthecloud247.com/windows-10-failed-to-enable-silent-encryption/#comment-53194 Mon, 13 May 2019 12:17:47 +0000 https://inthecloud247.com/?p=2018#comment-53194 In reply to Pankash.

Hi Pankash,
Yes, Months ago I have done silent encryption in a hybrid AAD environment. First in a lab and after that worked fine, implemented it at the customer. Must I say at first it didn`t work either, but after working with a MS engineer we where both able to configure silent encryption. The encryption settings in Intune used, are exactly the same as when I do silent encryption on an AAD joined device. That MS engineer never mentioned it is not supported in a Hybrid AAD environment. The only thing we noticed, the user is unable to read the recovery key from his AAD account. When the recovery key is needed, the user need to contact an admin.

Regards,

Peter

]]> By: Pankash https://inthecloud247.com/windows-10-failed-to-enable-silent-encryption/#comment-53192 Mon, 13 May 2019 12:07:23 +0000 https://inthecloud247.com/?p=2018#comment-53192 Hello Peter,

Hope you are well.
MS support engineer informed hybrid does not support silent encryption but the engg. was not very confident on what he was saying…
I have a quick question for you- have you done silent encryption in Hybrid Azure AD Windows 10 devices.

Regards,

Pankash

]]> By: Peter Klapwijk https://inthecloud247.com/windows-10-failed-to-enable-silent-encryption/#comment-52517 Mon, 15 Apr 2019 09:09:35 +0000 https://inthecloud247.com/?p=2018#comment-52517 In reply to Pankash.

Hi Pankash,
Like in the article you mentioned your devices are hybrid Azure AD joined, but not enrolled in Intune?
As far as I know, Hybrid Azure AD joined devices don`t show an (device) owner.

Regards,

Peter

]]> By: Pankash https://inthecloud247.com/windows-10-failed-to-enable-silent-encryption/#comment-52515 Mon, 15 Apr 2019 08:10:47 +0000 https://inthecloud247.com/?p=2018#comment-52515 Hello Peter,
Thank you for replying, I am currently stuck at Win10 1803 enrollment to Intune due to hybrid AD join as it does not show up device owner in Azure AD.
I have researching since a quite a long time but no luck with automatic device enrolment to Intune- below is the issues I am facing.
https://social.technet.microsoft.com/Forums/en-US/d2bda796-eef4-452a-b622-7c7463218555/mdm-enrollment-error-0x8018002b-on-windows-10-1709?forum=microsoftintuneprod

I will have this checked with standard users, as we can not give our users an admin rights due to our security policies.

Thank you!

Regards, Pankash

]]>