How to resolve error: 2016281112(Remediation failed)?

Rex Lacson 0 Reputation points
2025-03-04T20:32:23.6066667+00:00

Encryption of data storage on device

Error 2016281112(Remediation failed)

How to resolve error above?

Microsoft Intune Compliance
Microsoft Intune Compliance
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Compliance: Adhering to rules, standards, policies, and laws.
191 questions
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. ZhoumingDuan-MSFT 17,080 Reputation points Microsoft External Staff
    2025-03-05T01:47:03.7633333+00:00

    @Rex Lacson, Thanks for posting in Q&A.

    For the issue, here are some information you can refer to fix it.

    1.Please check if there deployed BitLocker policy to these devices and whether targeted devices have enabled BitLocker on their devices. For the setting, it generically checks for the presence of encryption on the device, more specifically at the OS drive level. Currently, Intune supports only the encryption check with BitLocker. In addition, the setting “Require encryption of data storage on device” does not require a reboot to evaluate Bitlocker compliance. However, the devices are not evaluated as compliant until the drive is fully encrypted. Here is a link with more details: https://learn.microsoft.com/en-us/mem/intune/protect/compliance-policy-create-windows#encryption

    If yes, try to sync the device, wait the encryption process done and restart device to see if the issue can be fixed. If no, try to enable BitLocker on these devices.

    2.Check targeted devices whether successfully enabled BitLocker.

    https://learn.microsoft.com/en-us/troubleshoot/windows-client/windows-security/bitlocker-issues-troubleshooting

    3.It is suggested that you don't require that setting in Compliance Policy.

    Please try above information, if there is any update, feel free to let me know.

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


  2. ZhoumingDuan-MSFT 17,080 Reputation points Microsoft External Staff
    2025-03-20T07:04:57.52+00:00

    @Rex Lacson, Thanks for posting in Q&A.

    After my deep research, to better clarify the issue, please check BitLocker-API management event log to see if BitLocker was enabled successfully, also check Mobile device management (MDM) agent event log to see if there exist useful message we can refer to.

    https://learn.microsoft.com/en-us/troubleshoot/mem/intune/device-protection/troubleshoot-bitlocker-policies

    If there is any update, feel free to let me know.

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.