I need the policy to ensure that all fixed drives in Windows machines have Bitlocker enabled, however don’t need it for removal drives (USB storage devices). Is there a way I can set this as currently when someone plugs in a USB drive the device goes out of compliance
207 Views
Replies (3)
Marked SolutionPending Review
Hexnode Expert
2 months ago
Marked SolutionPending Review
Hello @garofski,
Thank you for reaching out!
In Hexnode UEM, you can configure BitLocker specifically for fixed drives, OS drives, and removable drives. To ensure BitLocker is enabled only for fixed drives, you can configure the BitLocker settings under the Fixed Drive Settings section and leave the OS Drive Settings and Removable Drive Settings sections unconfigured. This way, only the fixed drives on your Windows devices will be encrypted.
Just to clarify, did you mean if there is an option where plugging in a USB drive causes the device to go out of compliance, or is this something you’re currently experiencing?
Cheers,
Eden Pierce
Hexnode UEM
Marked SolutionPending Review
Participant
2 months ago
Marked SolutionPending Review
Hi Eden,
Thanks for the explanation. I have the above configuration on the system; however, when someone plugs a USB drive in, it goes out of compliance. This should not happen or am I wrong?
Kind Regards,
Gareth Toon
Marked SolutionPending Review
Hexnode Expert
2 months ago
Marked SolutionPending Review
Hi @garofski,
Thank you for the clarification.
I have raised the case with our team, and our support team will be reaching out shortly to gather more information and assist you.
If you have any additional questions or need further assistance in the meantime, feel free to let me know.
Best regards,
Eden Pierce
Hexnode UEM
Save
