Windows 10: Bitlocker Encryption Through GPO

Hi,I am trying to deploy bitlocker encryption automatically to active directory users through GPO. The users must have TPM enabled and it should be hardware based bitlocker encryption. I also don't want any pre boot authenticationbitlocker password. I only want to encrypt the drives of the users and the password must be asked when the storage is removed and attached to other devices. It would be very helpful if anyone can Guide me to automate the encryption in GPO. Thank you.

:)

 

Bitlocker encryption level not syncing with GPO settings

I have a weird issue, it happens with each laptop I deploy when encrypting via Bitlocker. I have set GPO encryption level to XTS-AES 256.

I have a very simple build for deployment so my process is pull out of box, join to domain, move computer to proper OU, turn on Bitlocker ...and then some other steps.

The issue is that gpresult shows the specific bitlocker GPO is applied to the computer, but each time, every time, the first time I turn on bitlocker for a new computer, it defaults to 128 bit encryption. I have to stop the encryption, and restart it, before
it takes the XTS-AES 256. I usually do a gpupdate /force and restart also, so I'm not sure if that plays a role in "fixing" or if it's just the fact i have to start the first one, cancel and turn it on again. I'll test that in my next deployment; In my latest
build before even attempting encryption, I did gpupdate /force 2 times, with 2 restarts, but again still first time turning on bitlocker, only 128 bit encryption.

 

BitLocker Encrypted Hard Drive to MAC

Hi,



Thank you for posting your query in Microsoft Community. I regret the inconvenience caused to you. Let me help you.



I suggest you to perform below mentioned steps to disable BitLocker.

To disable BitLocker I would suggest you try the following steps and see if it helps.

• 
  Press Windows key + X and click on
  Control Panel.
  
• 
  Change View by from Category
  to Large Icons/Small Icons.
  
• 
  Click on BitLocker Drive Encryption and click on
  Turn BitLocker Off.
  
• 
  Follow on screen instructions. Click on Decrypt the Drive
  when the message appears.
  

I would suggest you click on the link below and refer the following article.

Scenario 12: Turning Off BitLocker Drive Encryption (Windows 7)

Scenario 12: Turning Off BitLocker Drive Encryption (Windows 7)

(You can refer the steps in the above link as they are applicable for Windows 10 as well)



Check if it helps.



I hope the information helps. Please keep us posted on the issue. We will be happy to assist you accordingly.

Thank you.

 

Device Encryption not avaiable

Hello Fraczek,

Thank you for contacting Microsoft Community.

We understand your concern in this regard.

• Are you referring to BitLocker Drive Encryption?
• What preventing you from doing this?
• Did you get any error message or code while doing this?

Before you come up with the above information, suggest you to refer the article

Help protect your files using BitLocker Drive Encryption and see if it help you.

Do refer the article
Windows BitLocker Drive Encryption Step-by-Step Guide and check if it help you with the required information.

Keep us posted if you require further assistance.