Microsoft Intune - Bitlocker (encrypt only used space)

Question

Hello,

Is there a possibility to encrypt OS only used disk space using Microsoft Intune Windows 10 (endpoint protection) configuration profile?

Answer 1

@Eduards , Silent Bitlocker Encryption seems to enforce Intune uses Used Disk Space only. We can try silent Bitlocker encryption to see if it can help. To silently enable Bitlocker on devices, we need to make sure the device prerequisites are met and configure the Bitlocker policy in the following link:
https://learn.microsoft.com/en-us/mem/intune/protect/encrypt-devices#silently-enable-bitlocker-on-devices

After the encryption is finished, run cmd as administrator and run the command "manage-bde -status" to see if the conversion status is "Used Space Only encrypted"

Hope it can help.

---

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

@Eduards
you question has been address here. See if this helps,
https://techcommunity.microsoft.com/t5/microsoft-intune/bitlocker-does-full-encrypt-but-we-want-used-space-only/m-p/1510843