Bitlocker password inventory task
Since upgrading to the latest version of the K1000 on Windows 7 Ent x64 edition Shell commands in custom software inventory no longer work. See below for the one which I use in order to detect and then display the Bitlocker status of the local c: drive. Has anyone encountered a similar issue?
ShellCommandTextReturn(%windir%\sysnative\manage-bde.exe -status c:)
ShellCommandTextReturn(%windir%\sysnative\manage-bde.exe -protectors -get c: -type recoverypassword)
I have also tried the following without much success
ShellCommandTextReturn(c:\windows\sysprep\manage-bde.exe -status c:)
ShellCommandTextReturn(c:\windows\sysprep\manage-bde.exe -protectors -get c: -type recoverypassword)
Answers (0)
Be the first to answer this question
ShellCommandTextReturn(%windir%\sysnative\manage-bde.exe -protectors -get c:)
What it return :
Chiffrement de lecteur BitLocker : Outil de configuration version 6.1.7601
Copyright (C) Microsoft Corporation. Tous droits réservés.
Volume C: []
Tous les protecteurs de clés
TPM :
ID : {XXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXX}
Mot de passe numérique :
ID : {XXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXX}
Mot de passe :
000123-000123-000123-000123-000123-000123-000123-000123
Then you need to create a computer report with the custom inventory field, and it's ok !
ps : I don't find how to parse the value, i just got all the text..
ps2 : In my configuration, all the passwords are saved in AD, don't know if it have any influence.
ps3 : You can as well create one custom inventory rules for each hard drive letter, and create a report to see all bitlocker keys for all hard drive for one machine !
ps4 : Sorry for my bad english ! - lipo 11 years ago
but it doesn't seem to work..Any help would be great - CEads 10 years ago