Hello @garofski,
Thank you for reaching out!
In Hexnode UEM, you can configure BitLocker specifically for fixed drives, OS drives, and removable drives. To ensure BitLocker is enabled only for fixed drives, you can configure the BitLocker settings under the Fixed Drive Settings section and leave the OS Drive Settings and Removable Drive Settings sections unconfigured. This way, only the fixed drives on your Windows devices will be encrypted.
Just to clarify, did you mean if there is an option where plugging in a USB drive causes the device to go out of compliance, or is this something you’re currently experiencing?
Cheers,
Eden Pierce
Hexnode UEM