something exciting

Some information about the exciting thing

Table of contents generated with markdown-toc


The script creates a transcript, checks for a TPM module and if exists attempts to enable bitlocker on the system drive and backs up to AD.
Transcript opens upon completion.

Details to be amended prior to running
Change the PIN to required number
Remove -WhatIf from each line
Restart computer to complete

$ScriptPath = split-path -parent $MyInvocation.MyCommand.Definition
Start-Transcript -Path "$ScriptPath\bitlockertranscript.txt" -Force
$SecureString = ConvertTo-SecureString "123456" -AsPlainText -Force # Enter a Numeric PIN
$SecurePassString = ConvertTo-SecureString "PasswordGoesHere" -AsPlainText -Force # Enter a Password
[string] $OSDrive = $env:SystemDrive

if ( (Get-Tpm).TpmPresent -eq $true ) {
    Write-Host 'Module Exists, enabling BitLocker Encryption'
    Enable-BitLocker -MountPoint $OSDrive -EncryptionMethod Aes256 -Pin $SecureString -UsedSpaceOnly -TPMandPinProtector -WhatIf
    Backup-BitLockerKeyProtector -MountPoint $OSDrive -KeyProtectorId $OSDrive.KeyProtector[1].KeyProtectorId -WhatIf
    Add-BitLockerKeyProtector -MountPoint $OSDrive -PasswordProtector -Password $SecurePassString -WhatIf
else {
    Write-Host 'No TPM Module present'


Start-Process Notepad -ArgumentList "$ScriptPath\bitlockertranscript.txt"

Back to Top


Please feel free to copy parts of the script or if you would like to download the entire script, simple click the download button. You can download the complete repository in a zip file by clicking the Download link in the menu bar on the left hand side of the page.

Report Issues

You can report an issue or contribute to this site on GitHub. Simply click the button below and add any relevant notes. I will attempt to respond to all issues as soon as possible.


Back to Top