October 10, 2023 at 05:55PM
Microsoft has issued a warning to customers about incorrect BitLocker drive encryption errors in certain managed Windows environments. The issue only affects client platforms like Windows 11 21H2/22H2 and Windows 10 21H2/22H2, as well as Windows 10 Enterprise LTSC 2019. It specifically impacts environments where drive encryption is enforced for OS and fixed drives. Microsoft’s Intune MDM platform is affected, but other impacted MDM apps have not been disclosed. The problem is a reporting issue and does not affect actual drive encryption or the reporting of other device problems. Microsoft is actively working on a solution.
From the meeting notes, the key takeaways are as follows:
1. Microsoft issued a warning regarding incorrect BitLocker drive encryption errors in managed Windows environments.
2. The known issue affects only client platforms such as Windows 11 21H2/22H2, Windows 10 21H2/22H2, and Windows 10 Enterprise LTSC 2019.
3. The problem only impacts environments where drive encryption is enforced for OS and fixed drives.
4. Microsoft’s cloud-based unified endpoint management service, Intune, is one of the affected MDM platforms, but other MDM apps with the same issue have not been disclosed.
5. The issue is caused by a reporting problem and does not affect drive encryption or the reporting of other device problems.
6. Admins can address the issue by enabling the “not configured” setting for the relevant drive encryption policies in Microsoft Intune.
7. Microsoft is actively working on a resolution and will provide more details in an upcoming update.
8. In other recent fixes, Microsoft resolved an issue with WSUS servers upgraded to Windows Server 2022 that prevented the pushing of Windows 11 22H2 updates to enterprise endpoints, as well as a bug related to video recording and playing failures in apps using the WVC1 codec on Windows 10 and Windows 11 systems.