By default on devices using the Intune service CSCS will be enabling Bitlocker disk encryption. This encrypts all of the data on the main local disk and provides added security to those who work remotely or who are mobile workers. If your BitLocker encrypted disk becomes locked you will see a message saying it has been locked and you need to contact the Service Desk for the recovery key. If the device has been assigned to you in the portal, you can get to the Recovery Key yourself:
If a user is associated with a Bitlocker-enabled Intune managed device (i.e. we have assigned it to them in Azure AD or user-enrollment is enabled and they have enrolled it) they can