WebMar 18, 2024 · how to enable BitLocker with intune but for a standard user and allow them to create the pin code in the BitLocker wizard ? With an admin account, it works. When my computer is enrolled, i see the popup asking me to enabled BitLocker, and then it launch the wizard. But with a standard account, it doesn't work. Because the wizard need admin … WebApr 29, 2024 · Here is a sample PowerShell script (uses Intune PowerShell SDK) you can use to create a compliance policy for Bitlocker with a 1 hour grace period. You can …
Enabling BitLocker with Microsoft Endpoint Manager - Microsoft Intune
WebNov 4, 2024 · In Create Profile, Select Platform, Windows 10, and later and Profile, Select Profile Type as Bitlocker. Click on Create button. Create Policy – Deploy BitLocker using Intune 2. On the Basics tab, enter a … WebRemoving out of date BitLocker recovery keys from Azure/Intune. Hello, We have enabled BitLocker in our environment some time ago, and due to an old group policy restricting the use of BitLocker on removable drives that I missed when I set everything up, the password rotation policy was failing on all machines that picked up the group policy. mark ficken lincoln service
BitLocker Intune policy hell - Microsoft Intune - The Spiceworks …
WebOct 31, 2024 · Begin by logging into the Azure portal and locate the Intune blade. In the Client Apps blade, select Apps, click Add and select the Windows app (Win32) as the app type. Configure the App package file by browsing to the C:\Tools\IntuneWinAppUtil\Output folder and select the Enable-BitLockerEncryption.intunewim file. Click OK. WebHow do folks manage stale device removal from Intune/AzureAD when the devices are bitlockered? If you remove the device from both, the keys are gone as well. Am I just stressing about nothing? One of my thoughts is to remove it from Intune but disable it in AzureAD. That way the key is still available in Azure but Intune is cleaner. WebMy question is how would you decrypt a device (remove bitlocker) from a device, should the need arise, using Intune. Using the manual way, I would login to the device and run this command manage-bde -off c: and remove the device from my O365 Bitlocker group so that it doesn't get the Bitlocker policy anymore. markfield and thornton theatre group