Share via


Collection Query - Desktop Bitlocker Drive encryption

Question

Wednesday, November 16, 2016 10:09 PM

I was wonder if anyone has ever created a collection query around desktops that have encrypted hard drives? I'm new at creating collection based queries and just can't seem to get it right.

I have already created two collections, one for laptops and one for desktops. I am using the Desktops collection as my limiting collection.

DHeinz

All replies (3)

Thursday, November 17, 2016 12:02 AM

Bitlocker status is not collected by default. You will need to do that first.

Garth Jones

Blog: http://www.enhansoft.com/blog Old Blog: http://smsug.ca/blogs/garth_jones/default.aspx

Twitter: @GarthMJ Book: System Center Configuration Manager Reporting Unleased


Thursday, November 17, 2016 2:43 AM | 3 votes

Dear Sir,

As Garth pointed out, you need to enable Bitlocker class to be inventoried during hardware inventory.

In CM admin portal, go to Administration - Client settings - Default client settings - Hardware inventory - Set Classes... - Search and enable Bitlocker class then save. 

After you've enabled the class, trigger hardware inventory on your devices so that data will be collected and uploaded to database. Then you can use SQL query for your reports against data in the tables (V_GS_ENCRYPTABLE_VOLUME). As well, you can use WMI query to create collections base on data in server WMI (SMS_G_System_ENCRYPTABLE_VOLUME).

See example thread: 

https://social.technet.microsoft.com/Forums/en-US/f2de85ff-01ef-45a7-994a-26329ce6f64c/bitlocker-report?forum=configmanagerosd

Best regards

Frank

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].


Monday, February 4, 2019 11:50 AM

is there anyway to get the protectors type? i.e TPMandPin OR just TPM?