Windows 11 adds a policy to exclude USB from BitLocker encryption

However, the most striking thing about this build is a new policy that allows Windows admins to exclude USB drives from BitLocker encryption.

"This will prevent the problem of automatic or random storage encryption being built into specialized equipment such as camcorders, recorders, conference systems, medical equipment.", Windows Insider team shared.

"When this policy is enabled, you will not be able to encrypt memory that is on the exclusion list, and you will not receive an encryption prompt when you connect it to a device while the "Deny" policy write permission to removable drives not protected by BitLocker" is enabled on it".

Windows 11 adds a policy to exclude USB from BitLocker encryption Picture 1

Currently, the new policy can only be configured by IT admins via mobile device manager (MDM) and custom configured Windows clients using the OMA-URI (Open Mobile Alliance Uniform Resource) setting. Indentifiers).

To perform hardware removal from BitLocker, the IT admin will have to collect the hardware ID and configure the BitLocker Exclusion list Policy in Intune.

Microsoft wants Insider users to try out the new policy and then respond to them with issues (if any) through the Feedback Hub.

The new build also comes with a bunch of changes and improvements to the Start menu and Started app including the ability to name application folders in the Start menu and site suggestions in the Get Started app that can be pinned to. taskbar.

windows 11

Lesley Montoya

Update 22 March 2022

You should read it

May be interested

Use BitLocker to encrypt external storage drives - Part 2
in the second part of this article series, i will show you how to enforce bitlocker security in a more consistent way using group policy settings.
How to Turn on BitLocker in Windows
bitlocker is a tool in windows that can be used to encrypt fixed drives, but also operating systems as well to protect your core data from outside intrusion. go to settings > update & security > device encryption.
How to Find BitLocker Recovery Key in Windows 10
bitlocker secures your drives with a strong, unique password that acts as an encryption key.
How to enable Full-Disk Encryption on Windows 10?
on windows 10, some use encryption by default, but some do not. in the following article, network administrator will show you how to check if the memory on windows 10 computer is encrypted.
How to enable BitLocker encryption on computers that do not support the TPM chip
how to enable bitlocker encryption on computers that do not support the tpm chip. tpm is only integrated on newer laptops or motherboards, so if you do not support tpm when enabling bitlocker, you will receive an error message.
What is bitlocker?
on the computer operating system there are many different types of data encryption, but the two most common types of encryption are file-encrypting file system and bitlocker to encrypt personal data. in this article, software tips will explain for
How to Recover BitLocker
bitlocker, as a drive encryption service, occasionally experiences lockouts. these result from changing bios/uefi settings, replacing hardware components, malfunctioning hardware, forgetting your bitlocker password, or entering your...
How to exclude files and folders with Robocopy in Windows 10
on windows 10, robocopy is a powerful command-line file management tool. in this guide, you'll learn the steps to copy data with robocopy on windows 10, except for unnecessary files and folders.
Windows 11 users report data loss due to Microsoft forcing BitLocker encryption
recently, microsoft announced the removal of the bypassnro script — a tool that helps users bypass the internet connection and microsoft account (msa) requirements during the out-of-box setup (oobe) of windows 11.
How to access Windows encrypted partitions using Bitlocker from Linux
if you have a windows partition encrypted with bitlocker, you will have trouble accessing your files. this article will show you how to use dislocker to access encrypted partitions by bitlocker.