Check if bitlocker is enabled in if/else powershell

owengregory · 2017-10-04T15:00:39.000Z

So I’m working on a powershell script as a temporary workaround until budget for next year lets us implement MBAM. Script will run against all PC’s in a csv and write the recovery key to a text file for us on a hidden network share so we have a copy of the recovery key since Windows seems to change these every so often with no rhyme or reason. I’ve been googling for the past couple hours but I can’t find a simple command or solution that lets me simply insert that the condition for if being that bitlocker is enabled. Is there even a way to do this? Logic tells me there should but I could be wrong.

Neally · 2017-10-04T15:09:07.000Z

Something like this?

$BLinfo = Get-Bitlockervolume

if($blinfo.ProtectionStatus -eq 'On' -and $blinfo.EncryptionPercentage -eq '100'){
    write-output "'$env:computername - '$($blinfo.MountPoint)' is encrypted"
}

owengregory · 2017-10-04T15:12:10.000Z

Yep. Exactly like that. Thank you!

edwineekelaers2 · 2017-10-04T15:24:59.000Z

manage-bde -status c:

This does the trick too. You can run it from within powershell too ( even on powershell 2 )

russring · 2018-05-17T09:41:39.000Z

this doesn’t work…

$BLinfo = manage-bde -status c:
if($blinfo.ProtectionStatus -eq ‘On’ -and $blinfo.EncryptionPercentage -eq ‘100’){
write-output “'$env:computername - ‘$($blinfo.MountPoint)’ is encrypted”
}

i need this to work on win7-8-10…