Bitlocker monitor - looking for a different method to monitor

Question

Greetings:

I am currently monitoring bitlock drives with a " File Existance monitor" which is working great but wanted to find out if someone might have another method of checking on a status of a bitlocker drives. My current monitor simple checks if a text file that I have placed on a bitlocker drives exists or not. There are occasions where there might be a time out due various reasons like network or CPU spike. So I am looking for alternative way of querying bitlock drives like wmi or other.

Here is a copy of my bitlock monitor if it helps:

jvb · Answer

Ah ok. That makes sense. In which case you would probably want VolumeStatus instead of ProtectionStatus but either way that should get you started on something...

One other suggestion... If you haven't already, you could add a custom property to those servers to show they have a bit lock drive and use that to create a custom

table so anyone who has rebooted a server could reference that and know they need to check the drive...

rumpelstiltskin · Answer

Thanks JVB. We have a situation at time where our developers rebooted a server and are not familiar with the server where it might have a bitlock drive that needs to be unlocked. This drove us to start monitoring those bitlock drives and let us know when they are in need of be unlocked. I will certainly start looking into a link you provided me with.

jvb · Answer

Not sure exactly what you want to check for beyond the drive existing but have you considered using some of the native BitLocker powershell cmdlets along

with custom script components to give you better detail... For example you could use the Get-BitLockerVolume cmdlet and its associated ProtectionStatus code

(this is a very rudimentary example)

$BitLockerStatus = Get-BitLockerVolume

if($BitLockerStatus.ProtectionStatus -eq 'Off'){Write-Host "Unlocked"}

Then couple that with a custom script component in SAM:

Windows PowerShell monitor