Windows 10: Windows 10 bitlocker MDM

Good morning,



I am rolling out bitlocker policies for our company via Intune, I am having issues however with it encrypting. I get a remediation error on certain devices,

the devices in question are up-to-date with Windows updates, TPM is compatible and secure boot is enabled.


I tried to open a ticket with Intune support and they said it was a windows issue not intune itself. The system specs are the exact same on one that is successful to one that is failing to encrypt. Maybe I am over looking something? Reading this issue on the internet it doesn't seem to be uncommon, however intune literally gives 0 background info on WHY it is failing.



The system specs are below that I am experiencing failings on, I am seeing about a 48% failure rate, I wanna get this figured out before I roll it out to the whole company.



System Specs




Operating system

Operating system

Windows

Operating system version

10.0.19041.329

Operating system build number

Operating system language

en-US

Operating system editon

Pro

Security patch level

System enclosure

IMEI

MEID

Manufacturer

LENOVO

Model

20FAS70703

Processor Architecture

unknown

Phone number

TPM Version

1.2, 2, 3



Conditional access

Activation lock bypass code

Azure AD registered

Yes

Compliance

Compliant

EAS activated

Yes

EAS activation ID

581A851401C437D939E853871FBECE4A

EAS activation time

3/25/2020, 1:12:34 PM

Supervised

No

Encrypted

No

:)

 

Need to turn off Bitlocker to install Windows 10

Hi,

We suggest doing the following steps again to resolve the issue. To complete the procedure, make sure that you have the following information:

• You must be able to provide administrative credentials.
• The drive must be BitLocker-protected.

To suspend BitLocker Drive Encryption on an operating system drive, please follow the steps below:

• Click Start, click Control Panel, click
  System and Security, and then click BitLocker Drive Encryption.
• Click Suspend Protection for the operating system drive.
• A message is displayed, informing you that your data will not be protected while BitLocker is suspended and asking if you want to suspend BitLocker Drive Encryption.
  
• Click Yes to continue and suspend BitLocker on the drive.

Let us know how it goes.

 

BitLocker on Windows 10

Hi,

Thank you for the response and keeping the status updated.

This could be due to some corruption in the system files, please check the methods below and see if it helps:

Method 1:

I suggest you to start the BitLocker Device Encryption service.

Follow the below steps:

• Press Windows key + R from the Keyboard.
• Type services.msc and hit Enter.
• Search for BitLocker Device Encryption service.
• Double click on BitLocker Device Encryption service and click on
  Start button.
• Click on the dropdown list and set the Startup type to
  Automatic.

Method 2: Please try the steps provided in the given article.

Unlock a BitLocker-protected drive

If the issue persists, follow method 2.

Method 3: Perform SFC scan

I would suggest you to perform SFC scan and check if that helps. The
sfc/scannow command scans all protected system files and replaces incorrect versions with correct Microsoft versions. It is a utility in Windows that allows users to scan for corruptions in Windows system files and restore
corrupted files.

Refer the link: Use the System File Checker tool to repair missing or corrupted
system files

Note: Link applies to Windows 10 as well.

More information:
BitLocker Frequently Asked Questions (FAQ)

Let us know the status of the issue. We will be glad to assist you further.

Thank you.

 

Windows 10 Tweaks

Pressing “Windows+Pause Break” (it’s up there next to scroll lock) opens the “System” Window.

Windows 10: In the new version of Windows, Explorer has a section called Quick Access. This includes your frequent folders and recent files. Explorer defaults to opening this page when you open a new window. If you’d rather open the usual This PC, with links to your drives and library folders, follow these steps:

• Open a new Explorer window.
• Click View in the ribbon.
• Click Options.
• Under General, next to “Open File Explorer to:” choose “This PC.”
• Click OK

credit to Lifehacker.