If you want to enable BitLocker silently, see Silently enable BitLocker on devices, in this article for additional prerequisites and the specific setting configurations you must use.Ĭomplete configuration of additional settings, and then save the profile.
Bitlocker download android windows#
On the Configuration settings page, expand Windows Encryption.Ĭonfigure settings for BitLocker to meet your business needs. Select Devices > Configuration profiles > Create profile. The new profile is displayed in the list when you select the policy type for the profile you created.Ĭreate a device configuration profile for BitLocker On the Review + create page, when you're done, choose Create. For more information on assigning profiles, see Assign user and device profiles. On the Assignments page, select the groups that will receive this profile. On the Scope (Tags) page, choose Select scope tags to open the Select tags pane to assign scope tags to the profile. On the Configuration settings page, configure settings for BitLocker to meet your business needs. Select Endpoint security > Disk encryption > Create Policy. Sign in to the Microsoft Endpoint Manager admin center.
Create an endpoint security policy for BitLocker Use one of the following procedures to create the policy type you prefer.
To manage BitLocker in Intune, your account must have the applicable Intune role-based access control (RBAC) permissions.įollowing are the BitLocker permissions, which are part of the Remote tasks category, and the built-in RBAC roles that grant the permission: You can also access important information for BitLocker from your devices, as found in Azure Active Directory (Azure AD). After Intune encrypts a Windows device with BitLocker, you can view and manage BitLocker recovery keys when you view the encryption report. Intune provides a built-in encryption report that presents details about the encryption status of devices, across all your managed devices.
0 kommentar(er)
