Event details

Have a question about Windows 11, device management, security, updates, or modern endpoint operations? This hour is dedicated entirely to your questions. Bring what's top of mind—from Windows 11 adop...
Heather_Poulsen
Published Jun 18, 2026
Office Hours
Technical Takeoff
Web series
lalanc01's avatar
lalanc01
Iron Contributor
Sep 16, 2026

Why is there no support for Bitlocker Pin in Intune, when it's recommended to have one to prevent most hacks regarding Bitlocker?

Most resort to creating custom scripts to enable it and it would be great to have it in Intune and/or to understand to reasons why it's not there (maybe a technical limitation)

thks

DaveD-MS-CETS's avatar
DaveD-MS-CETS
Icon for Microsoft rankMicrosoft
Sep 17, 2026

Hi, as far as I can see, Intune does support TPM startup PIN policies. In Settings Picker -> Bitlocker Drive Encryption -> Operating System Drives you can require a TPM startup PIN and configure the minimum PIN length as needed. TPM+PIN requires user interaction, so it isn’t compatible with silent BitLocker enablement during Windows Autopilot; these settings also primarily apply when BitLocker is first enabled. 

When requiring a startup PIN, the experience becomes:-

Power on -> Bitlocker pre-boot screen -> enter Bitlocker PIN -> Windows boots -> Windows sign in.