Create a BitLocker Encryption Compliance Report with Powershell in SCCM

Jan 28, 2015 · 2 min read

This can be achieved fairly easy using SCCM Configuration Items (CI) and Configuration Baselines (CB).

Script release history

Script

Script parameters

DriveType
Specifies the drive type(s) for which to get the bitlocker status. Default is: ‘3’.
DriveLetter
Specifies the drive letter(s) for which to get the bitlocker status. Default is: ‘All’.

Gets the BitLocker protection status

Configuration Item

Create the CI

Create the CI

Set the Operating System on which the CI can run

Set the Operating System on which the CI can run

Create a new setting and add the PowerShell script

Create a new setting and add the PowerShell script

Create the first Compliance Rule for Script Error Detection

Create the first Compliance Rule for Script Error Detection

Create the second Compliance Rule for BitLocker Status Detection

Create the second Compliance Rule for BitLocker Status Detection

You should end up with something like this

You should end up with something like this

Baseline

Create a new Baseline and add the Configuration item to it

Create a new Baseline and add the Configuration item to it

Deploy the Configuration Baseline

Deploy the Configuration Baseline

Validation

On the machine where you deployed the Baseline run Machine Policy Retrieval & Evaluation Cycle

On the machine where you deployed the Baseline run Machine Policy Retrieval & Evaluation Cycle

The Configuration Baseline should show up in a couple of minutes in the Configurations tab

The Configuration Baseline should show up in a couple of minutes in the Configurations tab

You can view a local report to check the compliance

You can view a local report to check the compliance

See “Instance Data” for the compliance check results

See “Instance Data” for the compliance check results

Or you can check the deployment results in the Monitoring node on the Site Server

Or you can check the deployment results in the Monitoring node on the Site Server

Reporting

Report preview

Report preview

You can download my Configuration Baseline report from here

Use Github for 🐛 reporting, or 🌈 and🦄 requests

🙏 Please subscribe or clap for this article, it makes a difference! 🙏