Windows 10: Bitlocker encryption level not syncing with GPO settings

I have a weird issue, it happens with each laptop I deploy when encrypting via Bitlocker. I have set GPO encryption level to XTS-AES 256.


I have a very simple build for deployment so my process is pull out of box, join to domain, move computer to proper OU, turn on Bitlocker ...and then some other steps.


The issue is that gpresult shows the specific bitlocker GPO is applied to the computer, but each time, every time, the first time I turn on bitlocker for a new computer, it defaults to 128 bit encryption. I have to stop the encryption, and restart it, before it takes the XTS-AES 256. I usually do a gpupdate /force and restart also, so I'm not sure if that plays a role in "fixing" or if it's just the fact i have to start the first one, cancel and turn it on again. I'll test that in my next deployment; In my latest build before even attempting encryption, I did gpupdate /force 2 times, with 2 restarts, but again still first time turning on bitlocker, only 128 bit encryption.

:)

 

Bitlocker vs device encryption in settings

Exist case a w 10 pro PC - old was w 7 pro...
to support Only Bitlocker and NOT
device encryption in settings... see shot above....?

reply:

• Yes this PC not support device encryption in settings only Bitlocker
• No supports both...

 

BitLocker Encrypted Hard Drive to MAC

Hi,



Thank you for posting your query in Microsoft Community. I regret the inconvenience caused to you. Let me help you.



I suggest you to perform below mentioned steps to disable BitLocker.

To disable BitLocker I would suggest you try the following steps and see if it helps.

• 
  Press Windows key + X and click on
  Control Panel.
  
• 
  Change View by from Category
  to Large Icons/Small Icons.
  
• 
  Click on BitLocker Drive Encryption and click on
  Turn BitLocker Off.
  
• 
  Follow on screen instructions. Click on Decrypt the Drive
  when the message appears.
  

I would suggest you click on the link below and refer the following article.

Scenario 12: Turning Off BitLocker Drive Encryption (Windows 7)

https://technet.microsoft.com/en-us/library/ee424315(v=ws.10).aspx

(You can refer the steps in the above link as they are applicable for Windows 10 as well)



Check if it helps.



I hope the information helps. Please keep us posted on the issue. We will be happy to assist you accordingly.

Thank you.

 

BitLocker not encrypting?

Thanks for the reply.

Obviously (from my post), I expected the file to be encrypted everywhere.

So, by "encrypt it at the file level", do you mean run BitLocker on the individual files, or set the encryption checkbox on the individual file's properties?