WebDec 16, 2024 · We’ve discovered an issue with the BitLocker Key rotation feature in Intune on recently updated Windows 10 devices. When you configure a Windows 10 device version 1909 to support rotation of the BitLocker recovery key, you can select that particular device in the console and enable the “BitLocker Key rotation” remote action. WebIf it doesn't match, it'll need to be manually unencrypted for silent encryption to re-encrypt it properly. For us, this is resolved with a reboot. My (possibly wrong) understanding was that Intune checks for BitLocker at boot/login, if it's off there, then it keeps the "enable BitLocker" requirement until the device reboots so it can run the ...
Encrypt devices reporting -2016281112 (Remediation failed)
WebAug 6, 2024 · Make sure that you have allowed the follow configuration in your Endpoint Protection policy: Allow standard users to enable encryption during Azure AD Join = Allow. If this policy is not configured to allow, it will fail to encrypt the device because the user does not have sufficient permissions to do so. 10. chickenmonkee • 2 yr. ago. WebNov 5, 2024 · I have manually disabled Bitlocker on the machine, rescoped the policy and watched it successfully encrypt with my own eyes OS drive: Bitlocker on. In the encryption report in Intune it states.. Encryption status - encrypted. Profile state - succeeded. this has just gotta be a false positive right? polyhedron graph
Bitlocker "-2016281112 (Remediation failed)" : r/Intune - reddit
WebJul 8, 2024 · Unfortunately the "system" account failing remediation is by design, and not something you can hide away, and microsoft states that the overall compliance of the device will not be degraded because of this, though it might see like it does. I have however found that in some cases the cause is with some of the built-in compliance policies. WebOct 5, 2024 · I am currently setting up Autopilot and want to enable BitLocker security at the point when the device is built or as a last resort could do post build. Unfortunately I am unable to get my device to enable BitLocker for a start. The device is co-managed and I have created a policy in Intune. WebAug 13, 2024 · After some troubleshooting I’ve found out that it came down to a policy that never gets pushed to the client when the setting is turned on if you are using Autopilot and the user who enrolls the device is a Standard User and not an Administrator on the machine.. If you have your Autopilot profile configured with “User account type” set to … polyhedron houston tx