Microsoft admits that there is a "65000" BitLocker encryption problem in Win11/10, which will be resolved through updates.

CTOnews.com October 10, Microsoft has confirmed a new Bug that affects all Windows versions, whether Windows 11 (22H2, 21H2) or Windows 10 (22H2, 21H2, and LTSC 2019).

According to reports, this vulnerability is related to BitLocker CSP encryption reports, while enterprise users need to use CSP to manage the encrypted content of PC and devices.

According to Microsoft, an error code 65000 is displayed in the "device encryption required" setting of Mobile device Management (MDM) Intune. Microsoft pointed out that in addition to Intune, similar third-party applications may also be affected.

CTOnews.com translated Microsoft's description as follows:

Using the FixedDrivesEncryptionType or SystemDrivesEncryptionType policy settings in the BitLocker configuration Service provider (CSP) node in a mobile device management (MDM) application may display a 65000 error in the require device encryption setting for some devices in the environment.

The affected environments are those that have selected full encryption or Space only with the "Force Drive encryption Type on operating system drives" or "Force Drive encryption on fixed drives" policy setting.

Microsoft Intune will be affected by this issue, but third-party MDM may also be affected.

Although Microsoft has not been able to solve this problem for the time being, the company offers a simple and feasible temporary solution: you can change the policy setting to "unconfigured".

Solution: to alleviate this problem in Microsoft Intune, you can set the "enforce drive encryption type on operating system drives" or "force drive encryption on fixed drives" policy to unconfigured.

Microsoft says the development team is working to address this issue and will provide updates in upcoming updates.