Bitlocker Intune question

%3CLINGO-SUB%20id%3D%22lingo-sub-1592111%22%20slang%3D%22en-US%22%3EBitlocker%20Intune%20question%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1592111%22%20slang%3D%22en-US%22%3E%3CP%3EHi%3C%2FP%3E%3CP%3EI%20have%20manage%20to%20enable%20bitlocker%20on%20my%20autopilot%20device%20and%20it%20is%20shown%20that%20protection%20is%20on.%20But%20when%20I%20try%20to%20copy%20file%20from%20the%20document%20folder%20to%20an%20external%20usb%20I%20can%20open%20this%20file%20on%20another%20computer.%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Capture.JPG%22%20style%3D%22width%3A%20799px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F212682iAF1D61F50C4EE666%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22Capture.JPG%22%20alt%3D%22Capture.JPG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Capture1.JPG%22%20style%3D%22width%3A%20523px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F212683i3B5E438AE4609510%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22Capture1.JPG%22%20alt%3D%22Capture1.JPG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3Ewhat%20i%20am%20missing%20%3F%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1592111%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EBitlocker%20Encryption%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMobile%20Application%20Management%20(MAM)%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1592651%22%20slang%3D%22en-US%22%3ERe%3A%20Bitlocker%20Intune%20question%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1592651%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F757848%22%20target%3D%22_blank%22%3E%40Krishanthad%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBitlocker%20works%20at%20the%20drive%20level%2C%20not%20individual%20folder%20level.%20Copying%20a%20file%20to%20a%20non-bitlocker%20drive%20will%20copy%20an%20unencrypted%20copy%20of%20it%20which%20means%20it%20can%20be%20opened.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20idea%20of%20Bitlocker%20is%20that%20if%20your%20laptop%20is%20or%20hard%20disk%20is%20stolen%2C%20the%20contents%20cannot%20be%20read%20by%20someone%20plugging%20it%20into%20another%20computer%20and%20attempting%20to%20browse%20-%20they%20would%20need%20to%20unlock%20it%20first.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ETo%20encrypt%20specific%20files%2Ffolders%2C%20you%20would%20need%20to%20leverage%20Encrypted%20File%20Services%20(EFS)%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1594525%22%20slang%3D%22en-US%22%3ERe%3A%20Bitlocker%20Intune%20question%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1594525%22%20slang%3D%22en-US%22%3E%3CP%3EThanks%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F383653%22%20target%3D%22_blank%22%3E%40HidMov%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Occasional Contributor

Hi

I have manage to enable bitlocker on my autopilot device and it is shown that protection is on. But when I try to copy file from the document folder to an external usb I can open this file on another computer.

Capture.JPG

Capture1.JPG

what i am missing ? 

2 Replies
Highlighted

Hi @Krishanthad 

 

Bitlocker works at the drive level, not individual folder level. Copying a file to a non-bitlocker drive will copy an unencrypted copy of it which means it can be opened.

 

The idea of Bitlocker is that if your laptop is or hard disk is stolen, the contents cannot be read by someone plugging it into another computer and attempting to browse - they would need to unlock it first. 

 

To encrypt specific files/folders, you would need to leverage Encrypted File Services (EFS) 

Highlighted

Thanks @HidMov