Forum Discussion
Bitlocker Encryption with AutoPilot Deployment (Non SCCM, Cloud ECM only)
Hi we are leveraging a config profile to encrypt our computers after Autopilot Enrollment. XTS-AES 256-bit used space only. The issue that we are seeing is that some of our PCs encrypt with 128 only...
Jason_Sandys
Microsoft
MicrosoftHow is this BitLocker configuration profile applied to the devices? Specifically, is it assigned to a group that the devices fall into before provisioning or after?
- It is currently applied to all Users and then the Devices through two dynamic groups, one Dynamic Query by ZTID and the other by GroupTag.
- Jason_SandysUser targeting is not sufficient here although your dynamic device group targeting should be.
Do you have the device ESP enabled?
In addition to the article linked to above by Steve, have you reviewed https://techcommunity.microsoft.com/t5/intune-customer-success/setting-256-bit-encryption-for-bitlocker-during-autopilot-with/ba-p/323791?
