Implement device profiles

A device profile allows you to add and configure settings that can then be deployed to devices enrolled in management within your organization. Once the device receives the device profile, the features and settings are applied automatically.

To create a device profile for Windows 10 devices that will configure BitLocker Drive Encryption for enrolled devices, follow these steps:

1. Sign into the Microsoft Endpoint Manager admin center at https://endpoint.microsoft.com as a global administrator.
2. Select Devices, and then under Policy, click Configuration profiles.
3. On the Configuration profiles blade, click Create profile.
4. On the Create a profile blade, under Platform, select Windows 10 and later; under Profile type, select Templates.
5. Under Template name, select Endpoint protection and click Create.
6. On the Endpoint protection page, enter the following properties:

• Name Enter a descriptive name for the profile.
  • Description Enter a description for the profile.

7. Click Next.
8. Under Configuration settings, click Windows Encryption.
9. Under Windows Settings, to the right of Encrypt Devices, click Require, as shown in Figure 2-4.

Figure 2-4 Configure device configuration policy

10. Review the other settings within this blade and then click Next.
11. On the Assignments blade, assign the policy to users, devices, or groups and then click Next.
12. On the Applicability Rules blade, review the settings and then click Next.
13. On the Review + create blade, review the summary and then click Create.
    The device configuration profile policy is created and is shown in the configuration profiles list.