Windows 10: Enable Bitlocker by using a script

Hi Everyone,


My first post in here, hopefully you can help me out with this simple question.


I've been able to create a GPO to deploy a script on all user machines and execute with a Scheduled Task with the use of SYSTEM permissions. Not a logon script etc.


It works perfectly fine.. the Bitlocker encryption keys just ends up in the AD multiple times. It's due to gpupdate that makes the script run again and my statement might just ignore that the drive already is encrypted at that point.. by running over and over again.


I've taken it from a Intune Bitlocker script and removed the unnecessary parts, but I believe it just ignore the part that the state is not in "FullyDecrypted" after the first run and just run the "Enable-BitLocker -MountPoint "C:" -RecoveryPasswordProtector" command over and over again.


Why won't it skip when the volumestatus isn't -eq "FullyDecrypted"?


Script:

Get-BitLockerVolume "C:"

$bdeStartingStatus = Get-BitLockerVolume "C:"



$bdeProtect = Get-BitLockerVolume "C:" Select-Object -Property VolumeStatus



if $bdeProtect.VolumeStatus -eq "FullyDecrypted" {



# Enable Bitlocker

Enable-BitLocker -MountPoint "C:" -RecoveryPasswordProtector

}


Kind Regards,

Kaspar Danielsen

:)

 

BitLocker won't enable on Windows 10 after update on Aug 9

Hi Brenda,

I would be happy to assist you.

Before I assist you I would like to know the information below,

• 
  Do you have a Windows 10 copy of the operating system?
  

I suggest you check whether the Bit locker is ON or OFF using the steps below.

Can you verify if BitLocker is enabled or disabled on your device? You can Enable/disable BitLocker by going to Desktop and follow these steps:

• 
  Swipe Right to Left to bring up the Charm.
  
• 
  Choose Settings.
  
• 
  Choose Control Panel.
  
• 
  Select BitLocker Drive Encryption.
  
• 
  Verify whether BitLocker is on or off on each device.
  

Also I suggest you to enable the WinRE so that you can enter the bit locker key and proceed.

When WinRE is disabled, you cannot enable BitLocker, and you receive an error message that resembles the following.

This PC doesn't support entering a BitLocker recovery password during startup. Ask your administrator to configure Windows Recovery Environment so that you can use BitLocker.

The solution would be to manually enable the windows recovery environment:

• 
  Copying the winre.wim file from c:\windows\system32\recovery\ to a folder on a recovery partition. (The partition need to have a drive letter at this point.)
  
• 
  Set the RE Image path. Example: reagentc /setreimage /path r:\recovery\windowsre
  
• 
  Enable RE with command: reagentc /enable
  
• 
  (You may remove the drive letter for the recovery partition after you have done this.)
  
• 
  Bit locker will be enabled.
  

If the issue still persists, suggest you to post your query on the below link.

https://technet.microsoft.com/en-us/library/hh831507(v=ws.11).aspx

Hope this information was helpful and do let us know if you need further assistance. We will be glad to assist.

Thank you.

 

Bitlocker

Hello Nandana,

To enable BitLocker on your computer, you follow the steps below:

• Sign in to your Windows account with an administrator access.
• Press the Windows key.
• Type and enter BitLocker.
• Click Turn on BitLocker.
• If the system is asking to sing in to administrator access, please do so.

For additional information about BitLocker, we suggest that you check the frequently ask question on this
link. The link provided applies to Windows 8.1 to higher version.

If you have other concerns, don't hesitate to reach us.

 

Clone Bitlocker enable drive to SSD

Keitaro

My name is Andre Da Costa; an Independent Consultant, Windows Insider MVP and Windows & Devices for IT MVP. I'm here to help you with your problem.

Heed the advice of the software, you must disable BitLocker before cloning. This is highly recommend if you ever want to get access to the drive.

There is nothing wrong with having to re-enable it after restoring the clone.

Step 1: disable BitLocker.

Step 2: clone drive

Step 3: restore the cloned image to the new drive.

Step 4: Re-Enable BitLocker.