Drive Encryption setting conflict with Group Policy

Issue

Drive Encryption failure due to a Group Policy Object (GPO) conflict.

Symptom

The issue column on the Drive Encryption page displays conflict with GPO configuration.

Cause

The encryption method configured in your Nebula policy doesn't match the BitLocker encryption method enforced by Group Policy.

Resolution

Align the encryption method in your policy with the one enforced by your GPO, then reboot the endpoint twice.

1. On the endpoint, open the Start menu and search for Local Group Policy Editor.
2. Navigate to Computer Configuration > Administrative Templates > Windows Components > BitLocker Drive Encryption to identify the encryption method enforced by your GPO.
3. In Nebula, go to Configure > Policies.
4. Open the Drive Encryption policy applied to the affected endpoints.
5. Go to the Drive Encryption section and update the encryption method to match your GPO.
6. Save the policy.
7. Restart the endpoint. This allows the Endpoint Agent to read and apply the updated encryption method.
8. Restart the endpoint to trigger BitLocker encryption using the correct method.
9. After the last restart, the encryption status in Nebula updates.

Return to Drive Encryption guide.