You could setup a baseline
Compliant would be C Drive encrypted, and non-compliant would be C Drive unencrypted.
Then you can have a collection based on non-compliant machines
Collection for non C drive bitlocker protection

David Zemdegs
1,591
Reputation points
Greetings,
If I create a collection and just specify bitlocker.driveprotection = 0 it will return all computers with at least one drive with bitlocker off.
What I was after was a collection which shows which computers have just the C drive protection off - dont care about other drives being off.
I obviously cant do bitlocker.driveprotection = 0 and bitlocker.driveletter = C as that will return those with a C drive but with D drive protection off even if C drive protection is on.
Thanks
David Z
2 answers
Sort by: Most helpful
-
Gary Blok 1,746 Reputation points
2021-04-09T04:40:11.04+00:00 -
David Zemdegs 1,591 Reputation points
2021-04-09T04:56:02.203+00:00 Thanks - we dont implement baselines - will have to look into it.