Windows 11 Autopilot enrolled devices are not getting encrypted

Question

Having issues with windows 11 devices getting enrolled with autopilot. The Bitlocker doesn't kick in and when I try to run the manually I get the error

"The Group Policy settings for BitLocker startup options are in conflict and cannot be applied. Contact your system administrator for more information." and when I check the event viewer i see these error

Right now the work around is deleting the FVE regkey but I would like to get this resolved and not have to do this all the time we get a device enrolled

Answer 1

@Redistro Thanks for posting in our Q&A.

Based on my research, someone said this error appears when you make changes regarding BitLocker in the Local Group Policy Editor or Registry Editor. For more details, please refer to the following link:

https://www.thewindowsclub.com/group-policy-settings-for-bitlocker-startup-options-are-in-conflict

Note: Non-Microsoft link, just for the reference.

So, before you deployed intune policy to encrypt this device, did you make changes about Bitlocker manually in the Local Group Policy Editor or Registry Editor?

And did this issue only occur in windows 11 autopilot enrolled device? Or all devices?

If there is anything update, feel free to let us know.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.