Complance Error in MBAM Btlocker

Question

Hi getting below Compliance error and most of the cases system is encrypted but protection type is off and system showing non compliance , please suggest for solutions.
1-An unknown error has occurred.
2-No Error
3-System partition not available or large enough.
4-Unable to find compatible TPM(System is in encrypted state but protection is off)
5-Waiting for TPM auto provisioning.(Most of the System is in encrypted state but protection is off)

Answer 1

Sorry, not answering your question, but Getting the same/similar.

Machines are showing as "encrypted" in BitLocker, and also showing "encrypted" on the local device. But falls under non-compliant on MBAM

Struggling to get an accurate reporting on this, as MBAM is unable to breakdown this reporting according to Computer details

Answer 2

Hello @Rameshkumar Jatiya and @TmanFromZA ,

I have written a comprehensive guide describing all the errors you have stated above. Kindly take a look at the following links below;

• How to fix unable to find compatible TPM: https://techdirectarchive.com/2022/02/03/how-to-fix-unable-to-find-compatible-tpm/
• How to fix System Partition not available or large enough on Microsoft BitLocker Administration and Monitoring: https://techdirectarchive.com/2022/02/03/how-to-fix-system-partition-not-available-or-large-enough-on-microsoft-bitlocker-administration-and-monitoring/
• No Error: This could mean a lot of things. You haven't logged in interactively to the device. Via Remote Desktop Connection, this will not work. It could also be that the agent hasn't communicated with the MBAM server yet of its status. KIndly take a loot of the time defined via Grup Policy. You may just have to keep this device up and running and check afterward!

Addressing error "System check found some issues during MBAM encryption: Fail, the Power cable must be connected": https://techdirectarchive.com/2022/02/03/system-check-found-some-issues-during-mbam-encryption-fail-the-power-cable-must-be-connected/

Below is how to determine why an MBAM protected device is non-compliant

• https://techdirectarchive.com/2022/01/12/how-to-determine-why-an-mbam-protected-device-is-non-compliant/

Answer 3

Hello @RAMESH KUMAR

For this specific issue, "Waiting for TPM auto-provisioning.(Most of the System is in the encrypted state but protection is off)". You will have to run this command get-tpm to determine if TPM Auto-provisioning is enabled or disabled.

On Dell devices, this is automatically enabled starting from Windows 10 and if for some reason it is disabled, you can enable it using the following command: Enable-TpmAutoProvisioning Below is the link to a guide I have written on the resolution of this issue: https://techdirectarchive.com/2022/05/10/enable-or-disable-tpm-auto-provisioning-how-to-fix-waiting-for-tpm-auto-provisioning/