I don't believe that's possible. Once its encrypted with used space only, you can't change it unless you decrypt and then re-encrypt it. I know this because we had a bunch of machines encrypted at 128-bit instead of 256-bit and we had to decrypt those machines and re-encrypt. There was no way to change those settings on the fly.
From: [email protected] [mailto:[email protected]] On Behalf Of Bradley, Matt Sent: Tuesday, January 24, 2017 5:29 PM To: [email protected] Subject: [mssms] Bitlocker Encryption I'm using pre-provisioning successfully in my task sequence for bitlocker/MBAM. It finishes fast, encrypting just the used space. Once it completes imaging, though, I'd like it to go ahead and start doing the full disk encryption in the background. Has anyone tried to do the same thing? I can't even figure out how to do it manually. If I type "manage-bde -on c:", it just says that it's already encrypted. I've also tried the group policy setting, but it doesn't seem to be having an affect either. ________________________________ Confidentiality Notice: This e-mail is intended only for the addressee named above. It contains information that is privileged, confidential or otherwise protected from use and disclosure. If you are not the intended recipient, you are hereby notified that any review, disclosure, copying, or dissemination of this transmission, or taking of any action in reliance on its contents, or other use is strictly prohibited. If you have received this transmission in error, please reply to the sender listed above immediately and permanently delete this message from your inbox. Thank you for your cooperation.
