SafeGuard - Bitlocker

Have you applied your policies to the domain PC's/OU's Dan and not the workgroup PC's too?

You'll need to apply the same policies (or policy groups) to both Workgroup AND Domain PC's for the workgroup PC's to encrypt in the same manner.

Please see attached, this is what is happening. SafeGuard is installed but it's not encrypting, when you do manage-bde -status it says decrypted and key protectors none found.

If you try and turn the TPM its says off, but when checking the BIOS I can't turn it on, there is no option?

Please see attached, this is what is happening. SafeGuard is installed but it's not encrypting, when you do manage-bde -status it says decrypted and key protectors none found.

If you try and turn the TPM its says off, but when checking the BIOS I can't turn it on, there is no option?

I'm not sure on the command you've used "turnon" to be honest? 

manage-bde -on c: 

Should enable encryption (not "turnon") 

However - you can't enable TPM if it's disabled or hidden from the OS. You'll need to go back into BIOS and look at the options to see how to enable TPM (and un-hide if needed) 

You still should be able to use encryption - just not TPM to help secure it. Using the command above should enable it but I would recommend if this unit HAS TPM that fixing that would be the better route?

Hi Dan,

Could you please suggest about the authentication policy set in your Safeguard Management Center.

It will be great if you can post the image of it here.