To ensure that a Disk Encryption policy provides the results that you expect, we recommend that you test it on one or more devices before distributing it to all intended devices.
The best way to test a policy is to apply a Sandbox version of the policy to a test device. The following sections explain how to do this:
IMPORTANT:The Disk Encryption policy is supported only on devices that use the standard BIOS. Windows devices that use UEFI BIOS are not supported; if a Disk Encryption policy is assigned to a Windows UEFI device, the policy is not applied.