If the workstations back up the encryption keys to Active Directory, you can query AD for computer objects that do or do not have the encryption key stored.

1 Spice up