bitlocker script information

.SYNOPSIS
Audit BitLocker status on domain-joined Windows endpoints.

.DESCRIPTION
This script queries Active Directory for all computers, connects to each via PowerShell,
and checks whether BitLocker is enabled on the C: drive. Results are exported to Excel.

.NOTES
Requires:
- Administrator privileges
- WinRM enabled on endpoints
- ActiveDirectory module
- ImportExcel module
#>

Import-Module ActiveDirectory
Import-Module ImportExcel

$results = @()
$computers = Get-ADComputer -Filter * | Select-Object -ExpandProperty Name

foreach ($computer in $computers) {
    try {
        $status = Invoke-Command -ComputerName $computer -ScriptBlock {
            (Get-BitLockerVolume -MountPoint "C:").ProtectionStatus
        } -ErrorAction Stop

        $bitlockerStatus = if ($status -eq 1) { "ON" } else { "OFF" }

        $results += [PSCustomObject]@{
            ComputerName = $computer
            BitLockerStatus = $bitlockerStatus
            Reachable = "Yes"
        }
    }
    catch {
        $results += [PSCustomObject]@{
            ComputerName = $computer
            BitLockerStatus = "Unknown"
            Reachable = "No"
        }
    }
}

$path = "C:\Temp\BitLocker_Report.xlsx"
$results | Export-Excel -Path $path -AutoSize -BoldTopRow -WorksheetName "BitLocker Status"

Write-Host "BitLocker audit complete. Report saved to $path"