Windows Encryption Services

BitLocker drive encryption is a data protection feature that integrates with the operating system and addresses the threats of data theft or exposure from lost, stolen, or inappropriately decommissioned computers. Data on a lost or stolen computer is vulnerable to unauthorized access, either by running a software-attack tool against it or by transferring the computer's hard disk to a different computer.

• BitLocker helps mitigate unauthorized data access by enhancing file and system protections.
• BitLocker also helps render data inaccessible when BitLocker-protected computers are decommissioned or recycled.

Key features

• Manage the Laptops and PCs your workforce uses to access company data
• Ensure devices are encrypted – where devices support encryption
• Ensure devices are compliant with company security requirements
• Remote wiping of devices if they are lost, stolen or an employee has left the business. Intune extends this to Windows and MacOS devices i.e. laptops and desktops
• Manage Bring Your Own Device (BYOD) if it is company policy to allow users to use their own devices to allow access company data. In this case, Intune can be used to remove only company data from the device when the user leaves - depending on how that data is stored
• Maintain an automated asset register of enrolled devices within the Intune console