Intune Bit-Locker Settings Not Appling

If you get this on the SETTING: Require Device Encryption STATE: Error ERROR: TYPE: 2 ERROR: CODE 65000

You could have bootable media inserted like the ISO you used to install Windows with on a VM.

You'll see this error in the event log under Applications and Services Logs > Microsoft > Windows > BitLocker-API > Management

Hope this helps