BitLocker

BitLocker recovery keys after Windows updates: Intune escrow to Entra ID, TPM/PCR failures, and a helpdesk runbook that survives audits

Blue-screen recovery after Patch Tuesday or BitLocker compliance flapping without escrow — this runbook covers TPM/PCR drift, Intune policies, Entra key retrieval, Graph RBAC edge cases, rotation, and how Nexma ties tickets to devices for audit-friendly ops.