MattShadboltI would like to learn the answer to the question from torquetechit_tonyd
I also tried to ask a few questions about Bitlocker strength under another blog post here Setting 256-bit encryption for BitLocker during Autopilot with the Windows 10 October 2018 Update Would you be able to comment?
Copy of my questions from the linked post:
1. I read in some forums that "Microsoft reduced their guidance in the Windows 10 baseline from 256 to 128, due to performance on some systems, and the requirement to decrypt if moving to 256." - Is this the case? I can not find any official coms.
2. Is there a way to gather BitLocker settings 128 vs 256 using Endpoint Manager or Security Center? Recommend monitoring option at https://docs.microsoft.com/en-us/mem/intune/protect/encryption-monitor "Select Devices > Monitor, and then under Configuration, select Encryption report." does not provide details. Is there an upcoming improvement for this?
3. Can you please provide a link to Microsoft recommended/endorsed process for converting devices from 128 to 256 in Azure AD joined estate.