BitLocker keys

[ScouseFix]

We store BitLocker keys in AAD and MEM and this works fine for all makes except MS Surface Devices.

Reports state they are encrypted but keys are not stored for them.

Has anyone seen this?

As I say Dell and HP etc all work as expected and all devices use the same policy

Thanks

[#2]

Hi,

We have seen it also on random devices... and for some reason the bitlocker key isn't escrowed to azure ad.. WHen looking at the event log we noticed the 846 event in the bitlocker log. So we made sure we have created a pro active rem to detect this event and if it occurred it will try to send the key to azure ad with a powershell command

https://call4cloud.nl/2021/02/b-for-bitlocker/