This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Intercept X and Encryption (Bitlocker) Windows 11

Hey All,

I was wondering has anyone has any issues with having this installed on Windows 11 ?

I installed it and the Encryption policy never seems to ask for a password, I can see there is a TPM but doesnt ask for a password to be set for bootup.

This thread was automatically locked due to age.

Parents

0 Qoosh over 2 years ago

Hi Ryan,

Thanks for reaching out to us.

Can you confirm if the policy setting "Require startup authentication" is enabled from the Sophos Central Device Encryption Policy?

Kushal Lakhan

Team Lead, Global Community Support
Connect with Sophos Support, get alerted, and be informed.
If a post solves your question, please use the "Verify Answer" button.

The New Home of Sophos Support Videos! - Visit Sophos Techvids
Cancel
Vote Up 0 Vote Down

Cancel
0 RyanHosiassohn over 2 years ago in reply to Qoosh

Hi Kushal,

Thanks for the reply, That is correct it is enabled.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 RyanHosiassohn over 2 years ago in reply to Qoosh

Hi Kushal,

Thanks for the reply, That is correct it is enabled.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Qoosh over 2 years ago in reply to RyanHosiassohn

Are any GPO's applied that may conflict with Sophos attempting to turn on Bitlocker and POA? The following command can help look into the applied GPO's
- "gpresult -h C:\Windows\Temp\GPResult.html"

Is the drive currently encrypted, but POA is not yet enabled? If so, did the policy from Sophos Central trigger encryption or is the drive in a decrypted state?

Kushal Lakhan

Team Lead, Global Community Support
Connect with Sophos Support, get alerted, and be informed.
If a post solves your question, please use the "Verify Answer" button.

The New Home of Sophos Support Videos! - Visit Sophos Techvids
Cancel
Vote Up 0 Vote Down

Cancel
0 GlennSen over 2 years ago in reply to Qoosh

Can you also share with us the current Status by opening an elevated access on CMD type manage-bde -status. bit locker may have been suspended. If the status shows "Protection Off" you need to manually enable the BitLocker by typing "manage-bde -protectors -enable c:"

Glenn ArchieSeñas (GlennSen)

Global Community Support Engineer

The New Home of Sophos Support Videos! - Visit Sophos Techvids
Cancel
Vote Up 0 Vote Down

Cancel
0 MichaelMcLannahan over 2 years ago in reply to GlennSen

I’ve found Central can display the previous OS I’m some places it it was an in place upgrade (for instance Windows 10 upgraded to Windows 11). Was it a fresh install of Windows 11 or an upgrade of Win10?
Cancel
Vote Up 0 Vote Down

Cancel