Troubleshooting Bitlocker Encryption with Intune

[@B-Th-Change]

I have a bitlocker policy that is conflicting with itself. Set up in silent. Having a hard time TSing this and finding info on conflicts like what I have. Thoughts?

[@-tineidae]

Its worth to mention that you can get the event logs by using the collect diagnostics on the device screen in intune. So there is no hands on required to see whats going on with bitlocker.

[@t-minus365]

good callout, thank you!

[@NikolaNovkovicfelna]

Can you please explain how can I save password only to azure ad, without users/local admins having it. I've selected "Hide recovery options during BitLocker setup" but its still showing. Another question, can you explain the recovery methods (key, password, combined) i dont want to use pre-boot tpm lock. Thanks!

[@dsmonroe63]

Great video! So if we don't have a Configuration Profile OR a Compliance Policy in place but machines are still showing not compliant and users are getting prompted to encrypt their drives... what are we missing? Thanks!

[@ane4412]

Hello, Thank you very much for this valuable video ! I have a question about different ways to deploy bitlocker, MD ATP....in my admin console under endpoint security, there are new options, Av, bitlocker....I'm really confused about which approach to use. Should i creat a policy under endpoints security for bitlocker, or device configuration or security base line ?! Please help before my beard becomes all white. An other question about assignment, do you put users or devices in groups to which you deploy different policies? Thanks in advance

[@t-minus365]

Hey Amine, i feel your confusion as microsoft has really been changing this UI alot lately! I live by one general rule as far as where i am working out of. If am using MD ATP in the environment, I use the endpoint security section to create all my policies. If i am not, i use the device configuration section to configure my bitlocker settings and work at the device level for the policies. It keeps things less confusing for me. I would recommend the groups for different policies, the main reason being if you apply blanket level policies to all users, some of the settings or device platforms will just show as not applicable to users which, to me, clutters things up in the environment

[@shreyagupta-nj8cy]

Hi, video is really good and helpful. I was having issue like bitlocker policy is applied on C driver however at the same time not applied on D drive. how this can be troubleshooted ? Your response will be of great help. Thank you 😊

[@unity4397]

Awesome work !

[@t-minus365]

Thanks!

[@emmanuelebin9427]

Excellent video!

[@t-minus365]

Glad you liked it!