Bitlocker

manage-bde -status - check the driver that is encrypted

manage-bde -off C: - disable bitlocker

Please inform the HD techs to check for Bitlocker recovery keys on Intune if the key from AD doesn't work (as the Bitlocker key escrow and rotation is in progress on Intune).

Let me know if any of the HD tech does not have the access to view the recovery key on Intune.

• If a machine asks for a Bitlocker key once, it is alright. It could possibly be due to the updates or a system configuration change.

• However if the user gets prompted for the Bitlocker recovery key multiple times or every single time after a reboot, then the tech can enable the BitLocker Auto Unlock on the drive that is prompting for the key again and again. For this:

• First of all, backup the recovery key (print it or store on moku)
• Manually "Turn on auto-unlock" on the drive
• Reboot the device and make sure the new recovery key is backed up

• Looks like in one of the tickets, it has been advised to a user to not reboot the device again (so as to avoid the recovery key prompt).

But please note that it is not a good advice.

We definitely need the users reboot their devices often for the patches and updates to install to stay up-to-date with security.