>>718083678
>this is retarded
>it makes zero sense
>it's insane
We're talking about Microsoft, no level of retardation or poor design is off-limits.
Anyway here's the PS script I use to enable bitlocker on work PCs remotely, the method used to execute it makes it totally silent and I have the recovery key that gets printed to the console automatically copied so it can be stored elsewhere for future reference.
# Enable BitLocker for the C: drive with AES256 encryption
$encryptionAlgorithm = "AES256"
$driveLetter = "C:"
# Check if BitLocker is already enabled for the drive
$encryptionStatus = (Get-BitLockerVolume -MountPoint $driveLetter).EncryptionPercentage
$encryptionPercentage = (Get-BitLockerVolume -MountPoint $driveLetter).EncryptionPercentage
if ($encryptionStatus -eq $null) {
# BitLocker is not enabled, so enable it
Enable-BitLocker -MountPoint $driveLetter -EncryptionMethod $encryptionAlgorithm -UsedSpaceOnly -RecoveryPasswordProtector -SkipHardwareTest
# Retrieve the recovery key for the drive
$recoveryInfo = Get-BitLockerVolume -MountPoint $driveLetter | Select-Object -ExpandProperty KeyProtector | Where-Object {$_.KeyProtectorType -eq 'RecoveryPassword'}
$recoveryKey = $recoveryInfo.RecoveryPassword
# Output the recovery key to the console
Write-Output "BitLocker has been enabled for drive $driveLetter."
Write-Output "Recovery Key: $recoveryKey"
Write-Output "Encryption Percentage: $encryptionPercentage%"
}
else {
# BitLocker is already enabled for the drive
Write-Output "BitLocker is already enabled for drive $driveLetter."
# Retrieve the recovery key for the drive
$recoveryInfo = Get-BitLockerVolume -MountPoint $driveLetter | Select-Object -ExpandProperty KeyProtector | Where-Object {$_.KeyProtectorType -eq 'RecoveryPassword'}
$recoveryKey = $recoveryInfo.RecoveryPassword
# Output the encryption percentage to the console
Write-Output "Encryption Percentage: $encryptionPercentage%"
}
