Blog Post

Core Infrastructure and Security Blog
6 MIN READ

BitLocker, Intune, and Raven

paulberg's avatar
paulberg
Icon for Microsoft rankMicrosoft
Dec 04, 2019
Hello Paul Bergson, back again with another story about my dog Raven.  From time to time we get a visit from a family member and they will bring their dog along, problem is we have never socialized R...
Updated Dec 04, 2019
Version 2.0
PaulBergson
dustintadam's avatar
dustintadam
Iron Contributor
Dec 05, 2019

paulberg;

 

Great Article, my organization has moved to using InTune for BitLocker management and reporting, and it works spectacularly well.

 

However, one thing your article leaves out that we had to learn the hard way: As a Hybrid-Join tenant, BitLocker will only escrow the BitLocker key to AD On-Premise, regardless of what the policy in InTune specifies. We had to deploy a secondary PowerShell script to all PCs to capture the BitLocker key and escrow it to Azure AD.