All machines from my network should have BitLocker successfully applied to them.

Is there a way that I can remotely query the machines to see if:

  1. Bitlocker has been enabled,
  2. Bitlocker has fully encrypted the drive.

Ideally I am looking for a way to do it without admin rights.


With this powershell command, you can check the bitlocker status on a volume:

manage-bde -status c:

The command can also be run remotely.

  • This seems to be not working without admin rights. – Andreas Schwab Jan 13 at 13:16

For a remote host:

manage-bde -status -computername **computername**

A screenshot of a console window, showing output of the "manage-bde -status c:" command.

That is the command that gives the information you need.

  • 5
    Thanks for posting an answer on our site. It would be highly beneficial to summarise what exactly is in the image you posted, so that users with vision impairments can benefit from it too. – Steve Dodier-Lazaro Aug 16 '16 at 17:15
manage-bde -status -computername "COMPUTERNAME" c:

The computer must be on and on the network however, does not work for machines out of network or that are off.

  • also this will not query all drives, notice the c: that is just for the drive, for multiple drives I recommend querying the drives and then using the last part as a variable with a for each loop – GoldenWest Aug 3 '18 at 17:50
  • the answer above that forgoes the C: will query multiple drives – GoldenWest Aug 3 '18 at 17:53

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.