Prompt users to set a BitLocker pre-boot startup PIN (TPM+PIN) via an Intune Win32 app - no local admin rights needed. ServiceUI bridges session 0, recovery keys escrow to Entra ID.
windows powershell mdm tpm bitlocker intune microsoft-intune endpoint-management entra-id win32-app serviceui device-encryption
-
Updated
Sep 23, 2026 - PowerShell