Intune tips 28 February 2024

Managing Bitlocker using Microsoft Intune

How to Enforce Bitlocker for your whole organisation

To enforce BitLocker using Microsoft Intune, you will need to follow these steps:

1. Sign in to the Microsoft Endpoint Manager admin center.
2. Go to Devices > Windows > Windows enrollment > Device compliance policies.
3. Click the ”+ Create policy” button.
4. In the “Create a device compliance policy” page, give your policy a name and a description.
5. Under “Settings,” select “BitLocker Drive Encryption” from the dropdown menu.
6. In the “BitLocker Drive Encryption” settings, choose the options you want to enforce. For example, you may want to require that BitLocker be turned on for all drives, and that a recovery key be stored in Azure Active Directory.
7. Click the “Create” button to save your policy.
8. Go to Devices > Windows > Windows enrollment > Devices, and select the devices you want to apply the policy to.
9. In the device details page, click the “Assign” button.
10. In the “Assign a policy” page, select the policy you just created from the list, and then click the “Assign” button.

Note: You will need to have the appropriate permissions to create and manage compliance policies in Intune. You may also need to ensure that the devices you are enforcing BitLocker on meet the requirements for using BitLocker, such as having a TPM chip and running a supported version of Windows.

How to Enable Bitlocker on a single device

To turn on BitLocker using Microsoft Intune, you will need to follow these steps:

1. Sign in to the Microsoft Endpoint Manager admin center.
2. Go to Devices > Windows > Windows enrollment > Devices.
3. Select the device you want to turn on BitLocker for.
4. In the device details page, click the Properties button.
5. In the Properties page, click the Properties tab, and then click the Edit button.
6. In the Properties page, scroll down to the BitLocker section.
7. Check the box next to “Turn on BitLocker” and enter a Recovery key to use if the device is lost or stolen.
8. Click the Save button to apply the changes.

Note: You will need to have the appropriate permissions to manage BitLocker settings in Intune. You may also need to ensure that the device meets the requirements for using BitLocker, such as having a TPM chip and running a supported version of Windows.

← All posts