Monitoring Endpoint Encryption and Percentage of Drives with Encryption Enabled Using Intune (Device Encryption Status)

Swahela Mulla 90 Reputation points
2023-10-16T14:12:32.6266667+00:00

Hello,

I'm seeking guidance on monitoring endpoint encryption status for devices managed through Microsoft Intune. Specifically, I want to determine the percentage of endpoints that have encryption enabled on their drives, such as BitLocker full disk encryption.

Is there a method, PowerShell script, command, API, Intune policy, or any other approach available that can help me collect this data? I'd greatly appreciate it if someone could provide an example of how to use these methods effectively to monitor endpoint encryption compliance within an Intune-managed environment.

Example:

For instance, if 89% of endpoints have BitLocker enabled, how can I verify this and ensure compliance?

Your expertise and assistance in achieving this are greatly appreciated.

Thank you for your help.

Best regards,

Swahela Mulla

Microsoft Intune Configuration
Microsoft Intune Configuration
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Configuration: The process of arranging or setting up computer systems, hardware, or software.
1,781 questions
Microsoft Intune Reporting
Microsoft Intune Reporting
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Reporting: The process of giving an account of something that has been observed, heard, done, or investigated.
65 questions
Microsoft Intune Compliance
Microsoft Intune Compliance
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Compliance: Adhering to rules, standards, policies, and laws.
143 questions
Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
4,649 questions
PowerShell
PowerShell
A family of Microsoft task automation and configuration management frameworks consisting of a command-line shell and associated scripting language.
2,256 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. ZhoumingDuan-MSFT 10,420 Reputation points Microsoft Vendor
    2023-10-17T06:50:26.92+00:00

    @Swahela Mulla,Thanks for posting in Q&A.

    From your description, I know that you are looking for a method to monitor the percentage of endpoints that have encryption enabled.

    Based on my testing, I found that you can check it in Intune. Location: Microsoft Intune admin center > Devices > Monitor > Encryption report.

    User's image

    In the page, you can see how many devices have enabled BitLocker. Also, you can export the report and the format of this report is excel. Then you can convert data in excel into percentage format through some operations.

    Hope this can be helpful.

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.