Tips or Improvements for my Bitlocker Encryption Test Script

Question

Hi Guys,
I just finished a little script to check if a drive is encrypted with Bitlocker. I wanted to post it here to see if anyone had some constructive criticism.
Here you go:
$computer = import-csv C:\scripts\bitlock3.csv
$namespace = "root\CIMV2\Security\MicrosoftVolumeEncryption"
Foreach($line in $computer){
$a=GWmi -class Win32_EncryptableVolume -computername $line.comp -namespace $namespace
$BitStat=$a.ProtectionStatus
If ($bitstat -eq 1) {Write-host $line.comp "is encrypted"}
Else {Write-host $line.comp "is NOT encrypted"}

Answer 1

You're very welcome.
This adjustment removes all Write-Output statements and replaces them with a hashtable of the computer name and encryption status. Objects are created from those hashtables, they're then sorted by status to have 'NOT Encrypted' appear at the top of the output
CSV, and then sorted by computer name (just a habit of mine):
$namespace = 'root\cimv2\Security\MicrosoftVolumeEncryption'
Import-Csv C:\Scripts\bitlock3.csv | ForEach-Object {
$computerName = $_
try {
$status = Get-WmiObject -Class Win32_EncryptableVolume -ComputerName $computerName -Namespace $namespace -ErrorAction Stop
if ($status.ProtectionStatus -eq 1) {
$props = @{
ComputerName = $computerName
Status = 'Encrypted'
} else {
$props = @{
ComputerName = $computerName
Status = 'NOT Encrypted'
} catch {
$props = @{
ComputerName = $computerName
Status = "ERROR - $_"
New-Object PsObject -Property $props
} | Sort Status -Descending | Sort Name | Export-Csv .\bitlockerStatus.csv -NoTypeInformation
Don't retire TechNet! -
(Don't give up yet - 12,830+ strong and growing)