338 votesPedro commented
Hello, I have tested this feature today, and it's working! When I enable EndPoint Protection Policy (Window Encryption) in Intune, and assign to group with AAD Hybrid Join devices it's applying correctly! And I can see Bitlocker recovery key in AAD Hybrid join device (from AAD console) and in AD computer object! (same key, of course). I cannot see recovery key in "Recovery keys" option from Intune (I think because in AAD, AAD Hybrid join device have no assigned user).