MicrosoftChris_Morrissey that's a bunch of awesome news! Thank you for compiling these.
Chris I would like to plea for a security and feature adoption change for both Group Policy and Intune.
I suggest Microsoft should upgrade Bitlocker to XTS-AES 256 for OS and other drive types.
For both, business and home users.
Not only was and is XTS-AES 128 chosen as default to maintain Windows 8 / 10 downlevel compatibility with Windows 7, but also the old default prevents modern hardware from using most performant Bitlocker Hardware Encryption. The feature and dependency on XTS-AES 256 has been published around December 2025.
In addition I would also plea to aid enterprises and especially home users upgrading from XTS-AES 128 to XTS-AES 256 for their OS disk.
Is this something already considered?
Many thanks finding answers here and the right teams to consider this feedback.
