Scaleoutme

Another little script to initialize the TPM and enable bitlocker for local volumes. Again, no hard coding of drive letters. Initialize-TPM Get-BitlockerVolume | Where VolumeType -eq "OperatingSystem" | Enable-Bitlocker -TPMProtector -UsedSpaceOnly -SkipHardwareTest Get-BitlockerVolume | Enable-Bitlocker -RecoveryPasswordProtector -UsedSpaceOnly -SkipHardwareTest Get-BitlockerVolume | Where VolumeType -ne "OperatingSystem" | Enable-BitlockerAutoUnlock Get-BitlockerVolume | Resume-Bitlocker

A little powershell computer startup script to backup bitlocker recovery keys to AD. Wanted to see if I could make it work without hard coding drive letters. $BLVOL = Get-BitlockerVolume | Where ProtectionStatus -eq "On" | Foreach { New-Object PsObject -Property @{ MP = $_.MountPoint KPID = ($_ | Select -ExpandProperty KeyProtector | Where KeyProtectorType -eq "RecoveryPassword").KeyProtectorId ;} } $BLVOL | Foreach {Backup-BitlockerKeyProtector $_.MP $_.KPID}