{"id":611,"date":"2013-08-30T18:07:06","date_gmt":"2013-08-30T18:07:06","guid":{"rendered":"http:\/\/sccm.haas.se\/?p=611"},"modified":"2013-08-30T18:23:55","modified_gmt":"2013-08-30T18:23:55","slug":"bitlocker-status-report","status":"publish","type":"post","link":"http:\/\/sccm.haas.se\/?p=611","title":{"rendered":"Bitlocker Status Report"},"content":{"rendered":"

With Windows 7, creating a report in SCCM for all your computers is really simple. First you need to expand your sms_def.mof file to gather the Bitlocker status data that is stored in WMI on your clients.<\/p>\n

Insert this at the bottom of
\n%Program Files%\\Microsoft Configuration Manager\\inboxes\\clifiles.src\\hinv\\sms_def.mof\u00a0<\/em><\/p>\n

[ SMS_Report (TRUE),\r\n\r\n SMS_Group_Name (\"BitLocker Volume Encryption\"),\r\n SMS_Class_ID (\"MICROSOFT|BITLOCKER_VOLUME_ENC|1.0\"),\r\n SMS_Namespace (FALSE),\r\n Namespace (\"\\\\\\\\\\\\\\\\localhost\\\\\\\\root\\\\\\\\cimv2\\\\\\\\security\\\\\\\\MicrosoftVolumeEncryption\") ]\r\nclass Win32_EncryptableVolume : SMS_Class_Template\r\n{\r\n [SMS_Report (TRUE), key ] string DeviceID;\r\n [SMS_Report (TRUE) ] string DriveLetter;\r\n [SMS_Report (FALSE) ] string PersistentVolumeID;\r\n [SMS_Report (TRUE) ] uint32 ProtectionStatus;\r\n};\r\n[ SMS_Report (TRUE),\r\n SMS_Group_Name (\"Trusted Platform Module\"),\r\n SMS_Class_ID (\"MICROSOFT|TRUSTED_PLATFORM_MODULE|1.0\"),\r\n SMS_Namespace (FALSE),\r\n Namespace (\"\\\\\\\\\\\\\\\\localhost\\\\\\\\root\\\\\\\\cimv2\\\\\\\\security\\\\\\\\MicrosoftTPM\") ]\r\nclass Win32_TPM : SMS_Class_Template\r\n{\r\n [SMS_Report (TRUE) ] boolean IsActivated_InitialValue;\r\n [SMS_Report (TRUE) ] boolean IsEnabled_InitialValue;\r\n [SMS_Report (TRUE) ] boolean IsOwned_InitialValue;\r\n [SMS_Report (FALSE), key] uint32 ManufacturerId;\r\n [SMS_Report (TRUE) ] string ManufacturerVersion;\r\n [SMS_Report (FALSE) ] string ManufacturerVersionInfo;\r\n [SMS_Report (FALSE) ] string PhysicalPresenceVersionInfo;\r\n [SMS_Report (TRUE) ] string SpecVersion;\r\n};<\/pre>\n
Thanks to Panu Saukko<\/a>\u00a0for that information.<\/p>\n
When your client run Hardware Inventory they will put the information from WMI into the ConfigMgr database. All you need to do is to create a report that gathers the data from it. It just so happens, I have one right here! Create a new report from ConfigMgr and put this into the SQL statement.<\/p>\n
SELECT     \r\n  v_R_System.Name0,'Chassis'=CASE \r\n WHEN v_GS_SYSTEM_ENCLOSURE.ChassisTypes0 in ('3','4','6','7','15') THEN 'Desktop'\r\n WHEN v_GS_SYSTEM_ENCLOSURE.ChassisTypes0 in ('8','9','10','21') THEN 'Laptop'\r\n END\r\n\r\n, v_GS_BITLOCKER_VOLUME_ENC.DriveLetter0, v_GS_BITLOCKER_VOLUME_ENC.ProtectionStatus0 AS 'Protection Status', \r\n                      v_GS_BITLOCKER_VOLUME_ENC.TimeStamp AS 'Inventoried', v_GS_TRUSTED_PLATFORM_MODULE.IsEnabled_InitialValue0 AS 'TPM Enabled', \r\n                      v_GS_TRUSTED_PLATFORM_MODULE.IsActivated_InitialValue0 AS 'TPM Activated', v_GS_TRUSTED_PLATFORM_MODULE.ManufacturerVersion0 AS 'TPM Manuf. Version', \r\n                      v_GS_TRUSTED_PLATFORM_MODULE.SpecVersion0 AS 'TPM Version',v_R_System.managedBy0 AS 'Managed By'\r\nFROM         v_R_System INNER JOIN\r\n                      v_GS_BITLOCKER_VOLUME_ENC ON v_R_System.ResourceID = v_GS_BITLOCKER_VOLUME_ENC.ResourceID INNER JOIN\r\n                      v_GS_TRUSTED_PLATFORM_MODULE ON v_GS_BITLOCKER_VOLUME_ENC.ResourceID = v_GS_TRUSTED_PLATFORM_MODULE.ResourceID\r\n                      INNER JOIN v_GS_SYSTEM_ENCLOSURE on v_R_System.ResourceID =  v_GS_SYSTEM_ENCLOSURE.ResourceID<\/pre>\n
This will give you a report that looks like this (click to zoom).<\/p>\n
\"Bitlocker<\/a><\/p>\n
So, in other words, you don’t need to run scripts on your clients to inventory Bitlocker information for Windows7. All you need is to expand SMS_Def.mof and create a report.<\/p>\n","protected":false},"excerpt":{"rendered":"
With Windows 7, creating a report in SCCM for all your computers is really simple. First you need to expand your sms_def.mof file to gather the Bitlocker status data that is stored in WMI on your clients. Insert this at the bottom of %Program Files%\\Microsoft Configuration Manager\\inboxes\\clifiles.src\\hinv\\sms_def.mof\u00a0 [ SMS_Report (TRUE),<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[40,39,38],"_links":{"self":[{"href":"http:\/\/sccm.haas.se\/index.php?rest_route=\/wp\/v2\/posts\/611"}],"collection":[{"href":"http:\/\/sccm.haas.se\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/sccm.haas.se\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/sccm.haas.se\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/sccm.haas.se\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=611"}],"version-history":[{"count":14,"href":"http:\/\/sccm.haas.se\/index.php?rest_route=\/wp\/v2\/posts\/611\/revisions"}],"predecessor-version":[{"id":627,"href":"http:\/\/sccm.haas.se\/index.php?rest_route=\/wp\/v2\/posts\/611\/revisions\/627"}],"wp:attachment":[{"href":"http:\/\/sccm.haas.se\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=611"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/sccm.haas.se\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=611"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/sccm.haas.se\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=611"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}