WebOct 5, 2024 · I am currently setting up Autopilot and want to enable BitLocker security at the point when the device is built or as a last resort could do post build. Unfortunately I am unable to get my device to enable BitLocker for a start. The device is co-managed and I have created a policy in Intune. WebJul 8, 2024 · Unfortunately the "system" account failing remediation is by design, and not something you can hide away, and microsoft states that the overall compliance of the device will not be degraded because of this, though it might see like it does. I have however found that in some cases the cause is with some of the built-in compliance policies.
BitLocker Intune policy hell - Microsoft Intune - The …
WebMay 10, 2024 · MinDevicePasswordLength. 14. However, some devices get " -2016281112 (Remediation failed)" ERROR CODE 0x87d1fde8. I have two Azure AD joined Intune devices. One succeeds and the other fails. Both 1809 .437: 1) One succeeds and gets MinDevicePasswordLength=14 while DevicePassWordEnabled =0 (enabled), which … WebApr 24, 2024 · But when the policy actually seems to work(ish) by enabling BitLocker on the target system, and storing the key in AD, I still get "Remediation failed" errors on the device in Intune. On all test devices this happens. That's obviously not all though. The process to activate BitLocker on different computers and different users differs as well. cissie barnes lewis on facebook
Resolved: Known Issue with BitLocker Key rotation for …
WebAug 6, 2024 · Make sure that you have allowed the follow configuration in your Endpoint Protection policy: Allow standard users to enable encryption during Azure AD Join = Allow. If this policy is not configured to allow, it will fail to encrypt the device because the user does not have sufficient permissions to do so. 10. chickenmonkee • 2 yr. ago. WebApr 29, 2024 · Here is a sample PowerShell script (uses Intune PowerShell SDK) you can use to create a compliance policy for Bitlocker with a 1 hour grace period. You can change this value to any number of hours but 1 is usually sufficient. Just change the -gracePeriodHours value from 1 to 2 if you need to increase it to 2 hours. WebMay 2, 2024 · One user changed his password but, he is having the same issue. The Password type setting is the default one. The devices are joined to an Azure AD. The Windows Hello for some of the devices is enabled … diamond\\u0027s t2