OS version – The version of Windows or macOS on the device. OS – The device platform, such as Windows or macOS. You can select a device from the list to drill-in and view additional details from the devices Device encryption status pane. The Encryption report pane displays a list of the devices you manage with high-level details about those devices. The encryption report supports reporting on devices that run the following operating system versions: The following sections provide details about the information that Intune presents in the report. The encryption report shows common details across the supported devices you manage. Select Devices > Monitor, and then under Configuration, select Encryption report. To find the report, Sign in to the Microsoft Intune admin center. The recovery key options that are available depend on the type of device you're viewing. Modifies the startup key for an operating system drive.ĭisplays brief Help at the command prompt.ĭisplays complete Help at the command prompt.The Microsoft Intune encryption report is a centralized location to view details about a device's encryption status and find options to manage device recovery keys. Modifies the PIN for an operating system drive. When the computer restarts, only a recovery password or recovery key can be used to unlock the drive. This command deletes all TPM-related key protectors from the drive. Sets the drive identifier field on the drive to the value specified in the Provide the unique identifiers for your organization Group Policy setting.įorces a BitLocker-protected drive into recovery mode on restart. To manage the TPM on these computers, use either the TPM Management MMC snap-in or the TPM Management cmdlets for Windows PowerShell. This command isn't supported on computers running Windows 8 or win8_server_2. Manages protection methods for the encryption key.Ĭonfigures the computer's Trusted Platform Module (TPM). Manages automatic unlocking of data drives.

Prevents access to BitLocker-protected data.Īllows access to BitLocker-protected data with a recovery password or a recovery key.

All key protectors are removed when decryption is complete. Provides information about all drives on the computer, whether or not they are BitLocker-protected.Įncrypts the drive and turns on BitLocker.ĭecrypts the drive and turns off BitLocker. This command-line tool can be used in place of the BitLocker Drive Encryption Control Panel item.

Lansweeper bitlocker