I need to scan the domain for only laptops

Question

I need to scan the domain for only laptops

Joshua Fisher 0

I need to write a script that scans the domain for all computers, and then pulls bitlocker status on ONLY the laptops.

Current code is:

Get-ADComputer -Filter * -SearchBase "DC=my,DC=domain,DC=com"| foreach{
  $HardwareType = (Get-WmiObject -Class Win32_ComputerSystem -Property PCSystemType).PCSystemType
  if ($Hardwaretype -eq 2) {
   manage-bde -status -cn $_.Name c: |
   where {$_ -match '(Computer Name|Protection Status|Conversion Status)'  }
    } 
    
}

So far, its pulling everything.

Rich Matheisen 47,886 Reputation points

2023-12-14T19:39:42.4066667+00:00
I don't know why you're returning a "2" from every system. Have you tried running that from an elevated PowerShell session?

There are only 8 values that will be present in the Win32_ComputerSystem's PCSystemType property:

Unspecified (0)

Desktop (1)

Mobile (2)

Workstation (3)

Enterprise Server (4)

SOHO Server (5) [Small Office and Home Office (SOHO) Server]

Appliance PC (6)

Performance Server (7)

You can also use the PCSystemTypeEx to expand that (adds "Slate" to the list):

Unspecified (0)

Desktop (1)

Mobile (2)

Workstation (3)

Enterprise Server (4)

SOHO Server (5)

Appliance PC (6)

Performance Server (7)

Slate (8)

You might find the Win32_SystemEnclosure class (https://learn.microsoft.com/en-us/windows/win32/cimwin32prov/win32-systemenclosure) provides more information. The ChassisTypes is an array of types:

Other (1)

Unknown (2)

Desktop (3)

Low Profile Desktop (4)

Pizza Box (5)

Mini Tower (6)

Tower (7)

Portable (8)

Laptop (9)

Notebook (10)

Hand Held (11)

Docking Station (12)

All in One (13)

Sub Notebook (14)

Space-Saving (15)

Lunch Box (16)

Main System Chassis (17)

Expansion Chassis (18)

SubChassis (19)

Bus Expansion Chassis (20)

Peripheral Chassis (21)

Storage Chassis (22)

Rack Mount Chassis (23)

Sealed-Case PC (24)

Tablet (30)

Convertible (31)

Detachable (32)

But even that seems to fall short of all the possible types found in the SMBIOS specification (https://www.dmtf.org/sites/default/files/standards/documents/DSP0134_3.4.0.pdf), section 7.4.2 (on pps 42 and 43).

While having a battery may be a reasonable selection choice, there are other systems that have batteries that aren't laptops.

A common feature of a laptop is that it usually has a closable lid. That bit of information can be retrieved by the CallNtPowerInformation function. That's something that would require a bit more work, though -- and you'd have to perform the data gathering on the individual machines (easy enough to do with Invoke-Command).

1 answer

Your answer

Answer 1

Anonymous

I need to scan the domain for only laptops

Hello,

You can try to use the command below to detect laptop or server. Shows battery status , if true then the machine is a laptop.

Get-WmiObject -Class win32_battery -ComputerName $computer

Any update, please let me know.

Best Regards,

Ian Xue

If the Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Joshua Fisher 0

Like this?:

Im getting Get-WmiObject : Access Denied errors.

Get-ADComputer -Filter * -SearchBase "DC=my,DC=domain,DC=com"| foreach{ 
  if (Get-WmiObject -Class win32_battery -ComputerName $_.Name) {
   manage-bde -status -cn $_.Name c: |
   where {$_ -match '(Computer Name|Protection Status|Conversion Status)'  }
    } 
    
}

Share via

I need to scan the domain for only laptops

1 answer

Your answer