Forum Discussion

Copper Contributor

Oct 09, 2023

Solved

Bitlocker encryption

Hi, We have enabled Bitlocker using Intune and used AES 256bit XTS. But when we run manage-bde -status it says the encryption method is XTS-AES 128. Any suggestions on this? Is it a potential Bu...

Intune

Harm_Veenstra
Oct 17, 2023
Ok, but if you want the intune clients to also have 256Bit... Then you will have to decrypt them and encrypt them again to fix that

Kashish_Goyal

Copper Contributor

Oct 17, 2023

Thanks Harm... Do you have like a documentation or procedure to decrypt Bitlocker. I have done some research, could not get to a point.

Thanks

Harm_Veenstra

MVP

Oct 18, 2023

Kashish_Goyal The Easiest to decrypt a 128Bit drive is to push out a script like this:

$BLV = Get-BitLockerVolume
Disable-BitLocker -MountPoint $BLV

This decrypts your Bitlocker volume, push this out to a group of computers. But... Exclude that group of computers of Configuration Profiles for encryption and Compliance things because that group won't be compliant anymore. After decryption, you can remove the computer from the group so that it receives the settings again and can be compliant again.