SafeGuard - Bitlocker

Have you applied your policies to the domain PC's/OU's Dan and not the workgroup PC's too?

You'll need to apply the same policies (or policy groups) to both Workgroup AND Domain PC's for the workgroup PC's to encrypt in the same manner.

We have never had any issues before so not sure what has change to be honest.

It just seems strange, if we do a couple of restarts it then kicks in, just wondered if it was something I was dong wrong.

Are you confirming your users and do you have your policies applied to users or computers?

Things are a little more long winded using WG's rather than domains but in essence it works in the same way.

They are applied to both, never normally had an issue, if we reboot a couple of times it then works.

Please see attached, this is what is happening. SafeGuard is installed but it's not encrypting, when you do manage-bde -status it says decrypted and key protectors none found.

If you try and turn the TPM its says off, but when checking the BIOS I can't turn it on, there is no option?

I'm not sure on the command you've used "turnon" to be honest? 

manage-bde -on c: 

Should enable encryption (not "turnon") 

However - you can't enable TPM if it's disabled or hidden from the OS. You'll need to go back into BIOS and look at the options to see how to enable TPM (and un-hide if needed) 

You still should be able to use encryption - just not TPM to help secure it. Using the command above should enable it but I would recommend if this unit HAS TPM that fixing that would be the better route?

Hi Dan,

Could you please suggest about the authentication policy set in your Safeguard Management Center.

It will be great if you can post the image of it here.