All machines from my network should have BitLocker successfully applied to them.

Is there a way that I can remotely query the machines to see if:

  1. Bitlocker has been enabled,
  2. Bitlocker has fully encrypted the drive.

Ideally I am looking for a way to do it without admin rights.

4 Answers 4


With this PowerShell command, you can check the BitLocker status on a volume:

Manage-bde -status -cn <computername/ip> <drive letter>

Where the -cn argument is optional. Examples:

Manage-bde -status C:
Manage-bde -status -cn C:

The command can also be run remotely.

Reference: https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/ff829849(v=ws.11)

  • This seems to be not working without admin rights. Commented Jan 13, 2020 at 13:16
  • This doesn't work on a large majority of Dell machines I maintain...
    – KolonUK
    Commented May 14, 2021 at 11:53

For a remote host:

manage-bde -status -computername **computername**

That is the command that gives the information you need.

Manage-bde -status C:

A screenshot of a console window, showing the output of the "manage-bde -status c:" command.

  • 5
    Thanks for posting an answer on our site. It would be highly beneficial to summarise what exactly is in the image you posted, so that users with vision impairments can benefit from it too. Commented Aug 16, 2016 at 17:15
manage-bde -status -computername "COMPUTERNAME" c:

The computer must be on and on the network however, does not work for machines out of network or that are off.

  • also this will not query all drives, notice the c: that is just for the drive, for multiple drives I recommend querying the drives and then using the last part as a variable with a for each loop
    – GoldenWest
    Commented Aug 3, 2018 at 17:50
  • the answer above that forgoes the C: will query multiple drives
    – GoldenWest
    Commented Aug 3, 2018 at 17:53

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .