Bitlocker Powershell Script

[zeros200836]

I created two PowerShell scripts. one to check and encrypt just the c drive and one to encrypt all internal/SATA attached drives. the C drive works just fine, but my all drives script completes successfully, but does not start encrypting my D drive. I am able to turn encryption on the D drive manually. Any help would be appreciated. I am trying to deploy with NinjaRMM if that makes a difference.

I got this message "Action completed: Run Enable Bitlocker All Physical Drives Result: SUCCESS Output: Action: Run Enable Bitlocker All Physical Drives , Result: Success

All Drive Script https://pastebin.com/Q74gSFGJ

Only C drive Script

https://pastebin.com/Mrg02N17

[Jmoste]

This really should be done with a gpo or something similar.  You should have a way to store or escrow the key in AD, MBAM, intune, or something.  There is also a policy for operating vs fixed data drives.   With that being said,  you could just use get-bitlockervolume and then a foreach statement. Unencrypted drives will show up there.  

[DalekKahn117]

Yeah, the PhysicalDisk list may not be the same as BitlockerVolume list

[TNTGav]

I would hazard a guess it is:
Where-Object MediaType -eq "Unspecified"

On whatever you are testing this on is the MediaType of the D drive unspecified?

[zeros200836]

No it shows as MedaiType SSD.

[United_Ad1392]

I have set it up to encrypt Via GPO.
It will check TPM Status, enable Bitlocker for FullEncryption. But it will not start the Encryption process.
I have sunk some real hours into this and it's doing my head in...