Bitlocker does Full Encrypt, but we want Used Space Only

Question

When we implement Bitlocker via InTune it works and we end up with disks Fully Encrypted.

Is it possible to set it so that it will only encrypt "Used Space Only"?

I've been digging through the settings but cannot see anything there that looks like the obvious option.

We are able to do Used Space Only encryption if we use the wizard on the workstation, but naturally I'd rather the InTune automation.

swaminathan_arumugam · Answer

Hi,Check this https://docs.microsoft.com/en-us/windows/client-management/mdm/bitlocker-csp#requiredeviceencryption

svendp · Answer

Thanks, but I can't see how that helps&nbsp;Swaminathan_Arumugam&nbsp;Are you able to point me to the text that describes specifically how to encrypt "Used Space Only".&nbsp;Svend.

moe_kinani · Answer

Hi SvendP,As I know Silent Encryption uses (Used Space Only) by default (screenshot attached). Here is great blog about Bitlocker and silent encryption using Intune.Hope this helps!Moehttps://www.anoopcnair.com/exploring-bitlocker-drive-encryption/Blog by our colleague Peter Klapwijk, used it many times before In case you having troubles enabling silent encryption.https://www.inthecloud247.com/windows-10-failed-to-enable-silent-encryption/

svendp · Answer

Thank&nbsp;Moe_Kinani&nbsp;, That certainly confirms that I am not totally blind and there is in fact no option in the UI.Strangely I do have the Block setting for&nbsp;Warning for other disk encryption&nbsp;which the article states is the actual "silent" part of the implementation, and so it should just do the User Data Only.&nbsp;I'm going to test it on a larger pool of laptops to see if any of them come up with a User Data Only Encryption. I have been informed that many of these workstations had encryption enabled before but that it was disabled so that a firmware update could be carried out. I wonder if that has a bearing on this re-encryption process.&nbsp;Svend.

dugtan · Answer

My experience has been that it will encrypt full disk if a partition existed prior to windows install and used space if none existed.&nbsp;

Forum Discussion

Bitlocker does Full Encrypt, but we want Used Space Only

6 Replies

Resources