This is the sixth in the six-part series about using BitLocker with Intune. BitLocker is a data protection feature that integrates with the operating system and addresses the threats of data theft or...
Updated Dec 19, 2023
Version 4.0
Blog Post
Windows release health article
BitLocker might incorrectly receive a 65000 error in MDMs
WI686191, Windows 11, version 23H2
Last updated: 31 October 2023 at 17:02 GMT
Status
Mitigated
User impact
"Requires Device Encryption" might incorrectly report as an error in some managed environments.
Are you experiencing this issue?
Is this post helpful?
Latest message View history
Using the FixedDrivesEncryptionType [link] or SystemDrivesEncryptionType [link] policy settings in the BitLocker configuration service provider (CSP) [link] node in mobile device management (MDM) apps might incorrectly show a 65000 error in the "Require Device Encryption" setting for some devices in your environment. Affected environments are those with the “Enforce drive encryption type on operating system drives” or "Enforce drive encryption on fixed drives" policies set to enabled and selecting either "full encryption" or "used space only". Microsoft Intune is affected by this issue but third-party MDMs might also pe affected. Important: This issue is a reporting issue only and does not affect drive encryption or the reporting of other issues on the device, including other BitLocker issues. Workaround: To mitigate this issue in Microsoft Intune, you can set the “Enforce drive encryption type on operating system drives” or "Enforce drive encryption on fixed drives" policies to not configured. Next steps: We are working on a resolution and will provide an update in an upcoming release. Affected platforms: - Client: Windows 11, version 23H2; Windows 11, version 22H2; Windows 10, version 22H2; Windows 11, version 21H2; Windows 10, version 21H2; Windows 10 Enterprise LTSC 2019 - Server: None