Latest / The Windows Podcast with Fexingo: Microsoft, PC, and Enterprise Windows Conversations
Windows 11 Is Quietly Mandating Enterprise Full Disk Encryption With BitLocker
Episode 93 of The Windows Podcast with Fexingo drills into a quiet but sweeping mandate: all Windows 11 Enterprise and Education devices must now have BitLocker full-disk encryption enabled by default. Lucas and Luna unpack the policy shift, which started rolling out in preview builds and became standard with the 2025 feature update. They walk through the technical requirements — TPM 2.0, Secure Boot, recovery key escrow to Entra ID — and what it means for IT admins managing fleets of devices. Specific numbers: Microsoft estimates that less than 40 percent of enterprise PCs in the field are…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.