Update windows/security/information-protection/bitlocker/bitlocker-management-for-enterprises.md

Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com>
This commit is contained in:
Aaron Czechowski
2022-12-22 18:00:50 -08:00
committed by GitHub
parent e149c6257e
commit dfa3662f26

View File

@ -37,11 +37,10 @@ Starting with Windows 10 version 1703, the enablement of BitLocker can be trigge
For hardware that is compliant with Modern Standby and HSTI, when using either of these features, [BitLocker Device Encryption](bitlocker-device-encryption-overview-windows-10.md#bitlocker-device-encryption) is automatically turned on whenever the user joins a device to Azure AD. Azure AD provides a portal where recovery keys are also backed up, so users can retrieve their own recovery key for self-service, if necessary. For older devices that aren't yet encrypted, beginning with Windows 10 version 1703, admins can use the [BitLocker CSP](/windows/client-management/mdm/bitlocker-csp/) to trigger encryption and store the recovery key in Azure AD. This process and feature is applicable to Azure Hybrid AD as well. For hardware that is compliant with Modern Standby and HSTI, when using either of these features, [BitLocker Device Encryption](bitlocker-device-encryption-overview-windows-10.md#bitlocker-device-encryption) is automatically turned on whenever the user joins a device to Azure AD. Azure AD provides a portal where recovery keys are also backed up, so users can retrieve their own recovery key for self-service, if necessary. For older devices that aren't yet encrypted, beginning with Windows 10 version 1703, admins can use the [BitLocker CSP](/windows/client-management/mdm/bitlocker-csp/) to trigger encryption and store the recovery key in Azure AD. This process and feature is applicable to Azure Hybrid AD as well.
Note: > [!NOTE]
Managing BitLocker except for enabling and disabling it requires one of the following licenses to be assigned to your users: > To manage Bitlocker, except to enable and disable it, one of the following licenses must be assigned to your users:
-Windows 10/11 Enterprise E3 or E5 (included in Microsoft 365 F3, E3, or E5) > - Windows 10/11 Enterprise E3 or E5 (included in Microsoft 365 F3, E3, and E5).
-Windows 10/11 Education A3 or A5 (included in Microsoft 365 A3 or A5) > - Windows 10/11 Education A3 or A5 (included in Microsoft 365 A3 and A5).
## Managing workplace-joined PCs and phones ## Managing workplace-joined PCs and phones