Forum Discussion

Iron Contributor

Mar 26, 2018

InstantGo Azure AD Join Encryption / Policy Required

Hi All Just need some clarification here. It's my understanding that InstantGo devices are automatically encrypted when joined to Azure AD. All good. So, would there be a need...

Intune

mobile device management (mdm)

Oliver Kieselbach

MVP

Mar 27, 2018

Hi Stuart,

Yes they are encrypted but If you like to control things like removable data drives you would need one. In addition if the device is not InstantGo capable but an 1803 version of Windows 10 you can even enforce encryption ("Encrypt device" = Require) in silent activation if you choose the new setting "Warning for other disk encryption" to block. If not InstantGo and pre 1803 and "Encrypt device" = Require you will get an Wizard to guide the user to activate BitLocker.

Compliance is always good for reporting or in conjunction with Conditional Access a requirement.

best,

Oliver