Windows 11 Adds a Policy to Exclude USB from Bitlocker Encryption

This guide provides a clear overview of windows 11, including the main concepts, practical steps, and common questions. Use it to understand the topic, compare the available options, and make a more informed decision.

"This will prevent the problem of automatic or random storage encryption being built into specialized equipment such as camcorders, recorders, conference systems, medical equipment.", Windows Insider team shared.

"When this policy is enabled, you will not be able to encrypt memory that is on the exclusion list, and you will not receive an encryption prompt when you connect it to a device while the "Deny" policy write permission to removable drives not protected by BitLocker" is enabled on it".

Currently, the new policy can only be configured by IT admins via mobile device manager (MDM) and custom configured Windows clients using the OMA-URI (Open Mobile Alliance Uniform Resource) setting. Indentifiers).

To perform hardware removal from BitLocker, the IT admin will have to collect the hardware ID and configure the BitLocker Exclusion list Policy in Intune.

Microsoft wants Insider users to try out the new policy and then respond to them with issues (if any) through the Feedback Hub.

The new build also comes with a bunch of changes and improvements to the Start menu and Started app including the ability to name application folders in the Start menu and site suggestions in the Get Started app that can be pinned to. taskbar.

Conclusion

Understanding Windows 11 makes it easier to compare options, avoid common mistakes, and apply the information in this guide more effectively. Review the relevant requirements before making changes or choosing a solution.