Sophos Intercept X and Encryption (Bitlocker) Windows 11

Hi Ryan, 

Thanks for reaching out to us. 

Can you confirm if the policy setting "Require startup authentication" is enabled from the Sophos Central Device Encryption Policy?

Hi Kushal, 

Thanks for the reply, That is correct it is enabled. 

Are any GPO's applied that may conflict with Sophos attempting to turn on Bitlocker and POA? The following command can help look into the applied GPO's
- "gpresult -h C:\Windows\Temp\GPResult.html" 

Is the drive currently encrypted, but POA is not yet enabled? If so, did the policy from Sophos Central trigger encryption or is the drive in a decrypted state? 

Are any GPO's applied that may conflict with Sophos attempting to turn on Bitlocker and POA? The following command can help look into the applied GPO's
- "gpresult -h C:\Windows\Temp\GPResult.html" 

Is the drive currently encrypted, but POA is not yet enabled? If so, did the policy from Sophos Central trigger encryption or is the drive in a decrypted state? 

Can you also share with us the current Status by opening an elevated access on CMD type manage-bde -status. bit locker may have been suspended. If the status shows "Protection Off" you need to manually enable the BitLocker by typing "manage-bde -protectors -enable c:"

I’ve found Central can display the previous OS I’m some places it it was an in place upgrade (for instance Windows 10 upgraded to Windows 11). Was it a fresh install of Windows 11 or an upgrade of Win10?