How to implement a Bitlocker policy on Intune
Question
Hi All,
Dear Experts, I have implemented a BitLocker policy via Intune for some machines. The recovery key is not stored in Azure or on the Intune console. Please advise.
Posted by Danish Khan in HTMD FB Group
Answers ( 4 )
Replied by Danish Khan
Larry Hernandez checked nothing was there
Replied by Ashu Ashu
Check fist it is getting encrypted or not
Go to devices and go to monitor and go to encryption status and check ur device name and see the status
Replied by Lee Burridge
Use this
https://github.com/…/Intune/BackupBitlockertoAAD.ps1
Replied by Dirk Davis
We use a hybrid system also, and our BitLocker keys are stored in on prim AD
Replied by Larry Hernandez
The key is also stored in the user’s account.
have the user log into office.com
click on the user name in the upper right
click view account
click Manage Devices
click on the Computer name
Click on View BitLocker Key
Click on the Show Recovery key
Replied by Sean Kinney
What do the logs tell you?
Have you looked to see if the polices are applied and if the system marked them as successful or fail?
Does the user account have an intune license?
Replied by Nathan Mejor
Check to make sure you aren’t having any errors in the event log. I had an instance where it would not encrypt, and the registry had a record in it that had to be cleared. The issue resolved itself immediately
Replied by Sean Kinney
What do the logs tell you?
Have you looked to see if the policies are applied and if the system marked them as successful or failed?
Does the user account have an intune license?
Replied by MichÆl Courville
Were the machines already encrypted?
Replied by Danish Khan
MichÆl Courville noo
Replied by Kevin Quinn
Are they hybrid joined, if so check on-prem AD
Replied by Danish Khan
Kevin Quinn Azure and JOI
Replied by Kanishaka Ahluwalia
Run the script via Intune to back up the keys to AAD..it works nicely
Replied by Danish Khan
Kanishaka Ahluwalia please share the script