Bitlocker windows full#

Microsoft Intune recently made some UI changes to call out that these settings only apply at first encryption. This causes a situation whereby the BitLocker disk encryption does not meet the IT administratorвЂ™s defined requirements in Intune. When a Windows 10 device runs through the Out Of Box Experience (OOBE), and an AADJ occurs during OOBE, BitLocker may be automatically enabled on modern hardware with the default XTS-128-bit encryption algorithm before the Intune MDM policy is processed and the IT administratorвЂ™s configuration is applied.

Encryption can be enabled on unencrypted Windows 10 PCs using MDM policy, such as when the device becomes Azure AD Joined (AADJ).

An IT Administrator can set this algorithm to AES-CBC 128-bit, AES-CBC 256-bit, XTS-AES 128-bit or XTS-AES 256-bit encryption.Д«y default, Windows 10 will encrypt a drive with XTS-AES 128-bit encryption.

Bitlocker windows full#

The BitLocker encryption algorithm is used when BitLocker is first enabled and sets the strength to which full volume encryption should occur. One such setting allows the IT Administrator to set the BitLocker encryption algorithm. Microsoft Intune provides a comprehensive set of configuration options to manage BitLocker on Windows 10 devices, October 2018 update.