Azure connected computer keeps asking for Bitlocker after Update

Question

I have a basic Bitlocker setup for connected devices to Intunes / Entra for Bitlocker, I have one set in Config Profiles (attached photo) and another basic setup turned on in Config for Bitlocker.

The Device Config for bitlocker is just:

Windows Encryption

Encrypt devices Require

OS drive recovery Enable

But now I have a few computers that every time there is a windows update they always have to type in the Bitlocker code, how can I fix this or turn that off? I have looked all over but cant seem to find anything.

or did I mess up with having two different Bitlocker configs in 2 different sections?

Answer 1

@Matthew Hedrick, Thanks for posting in Q&A. In General, we only configure one setting in one policy. If we configure same setting in two policies, it may cause conflict. So I suggest excluding one policy for the device or user group. And check the deploy status of the policy on the affected device. however, if the two policies are with different settings, please get screen shot of another policy.

For the affected device which needs BitLocker code, could you let us know if it means BitLocker recovery key or password?

Meanwhile, for these affected devices, are the BitLocker already enabled on the device side? Please get screen shot of the result of running command "manage-bde -status".

Please check the above information and if there's any update, feel free to let us know.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.