Disk Encryption

Iron Contributor



Kindly want to know if disk encryption policy is based on devices or per user log in when setup?





7 Replies

Hi @ElieAT! My answer would be: it depends. That's not very helpful, though :). In my opinion, disk encryption is a configuration that is tied to a device, so I would assign it to a device.


Should you, however, have a use case where this configuration should apply to any (enrolled) device the user logs on to: assign it to users. I just really can't think of any reason you'd want that.

It is based on the device; you may have a look at: https://docs.microsoft.com/en-us/mem/intune/protect/encrypt-devices
I support Neil and Reza, device should be assigned.

Thanks for your support
Thanks for your answer
Thanks for your details
Welcome, glad it was helpful.