>

Audit BitLocker With Get-BitLockerVolume

List encryption status and protectors for every volume.

WindowsdisksecurityencryptionLow risk
Run Get-BitLockerVolume to show encryption percentage and protection status.

01Command

Command
$ Get-BitLockerVolume

02What it does

The cmdlet reports each volume's encryption method, percentage and key protectors, which is what a compliance check needs. Exporting it across a fleet verifies that disks are actually encrypted, something that would otherwise mean opening BitLocker settings on every machine.

03Risk

RiskLow risk
RequirementsRun PowerShell as Administrator
!Warning: Read status only; changing protectors or suspending encryption can expose or lock data, so treat those operations with care.

04Undo

✓No undo needed — this command does not change persistent state.

05Sources

  • Get-BitLockerVolume
    Microsoft Learn · vendor-doc · 2026-09-20
    Evidence: Retrieves BitLocker volume status and protection settings.

Last verified: 2026-10-13 · Category: Security & Privacy

06Related solutions

Fix 'scripts is disabled on this system' with Set-ExecutionPolicy
WindowsTerminaldevelopersecurity

Understand PowerShell's execution policy scopes and set the one that lets you run your own local scripts without gutting the security model.

Medium risk ✓ 2026-09-17
Take ownership of a file or folder with takeown and icacls
WindowsFilessystemsecurity

Two-step command sequence that makes you the owner of a locked file tree and grants yourself full control — the standard fix for 'Access is denied' on old profiles and OS reinstall leftovers.

High risk ✓ 2026-09-17
Verify File Hashes with certutil -hashfile
Windowshashcmdsecurity

Built-in Windows command to compute MD5, SHA1 or SHA-256 hashes of any file.

Low risk ✓ 2026-09-17