Check BitLocker Encryption Status
Shows BitLocker protection status, encryption percent and method for each volume. Exits with an error if the system drive is not encrypted.
- Windows18
- macOS5
- Linux5
- Network3
- Disk and storage4
- Inventory4
- Security9
- Updates4
- Maintenance4
Script
$volumes = Get-BitLockerVolume
$volumes | Select-Object MountPoint, VolumeStatus, ProtectionStatus, EncryptionPercentage, EncryptionMethod |
Format-Table -AutoSize | Out-String -Width 200
$systemDrive = $volumes | Where-Object { $_.MountPoint -eq $env:SystemDrive }
if ($systemDrive.ProtectionStatus -ne 'On') { Write-Output 'System drive is NOT protected.'; exit 1 }Run it on every device with Moftgate
- 01
Add the script
In the Moftgate console, open Scripts > New script and paste the code.
- 02
Select the OS
Select Windows as the target operating system.
- 03
Test it
Run it on one test device first and read the output.
- 04
Roll out
Send it to all targets by group, profile or tag. Each device result is recorded separately.
These may help too
Check Microsoft Defender Status
Shows whether real-time protection is on, the signature version and the signature age. Warns when signatures are older than 3 days.
Windows · PowerShellCheck Windows Firewall Profiles
Shows whether the Domain, Private and Public profiles are on, and the default inbound action.
Windows · PowerShellList Local Administrators on Windows
Lists members of the local Administrators group. The group is found by its language-neutral SID (S-1-5-32-544), so it works on any Windows language.
Manage scripts from one console
Target selection, a confirmation step, per-device output and an audit log. The first 200 endpoints are free for a year.