Bitlocker Troulbeshooting Known Issues

Optiplex 7070

Cause: Unknown, speculated compatibility issue between TPM and server

Happens on: So far we have only seen this issue on Optiplex 7070

The Fix:

Prerequsites

​​ITS imaging task sequence provides Bitlocker client (MBAM)​ in the imaging task sequence, as long as it was imaged with this TS, you don't necassarily need to re-image the machine
Placing the computer in the Stamford OU or Managed Workstation OU ensures that the necassary GPO's will be applied to the computer
Solution:
​​Run command prompt as an administrator
Turn encrytpion on manually: manage-bde.exe -on C:
Check the status of ​the machine with: manage-bde.exe -status
It should prompt you to reboot the machine, the machine will do a hardware check and initiate encryption
Verify ​​the drive is encrypting
You will know the machine is encrypting when:
The My Computer/This PC icon for the C drive shows a lock
manage-bde.exe -status yields a message stating Encryption is in Progress (in progress) or Drive is Fully Encrypted and Protection Status turns to Protection On (completed)​

If this doesn't work, escalate to ITS Managed Workstation group and be preapred to troubleshoot with them.