Sign into SCCM via MRS-RDP using your admin credentials.

Only do this if computers are not being encrypted and must be forced.

    1. Right click on host in SCCM > Security tools > bitlocker status

    2. Add Numerical Password Key Protector

    3. Backup Numerical Password Key Protector to Active Directory

    4. Confirm the recovery key appears on the computer object in AD

    5. Encrypt Volume

    6. Click Refresh for a status update