-
Notifications
You must be signed in to change notification settings - Fork 17
/
Copy pathConfigureBitlockerOnOSDrive.ps1
40 lines (34 loc) · 1.32 KB
/
ConfigureBitlockerOnOSDrive.ps1
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
Configuration ConfigureBitlockerOnOSDrive
{
Import-DscResource -Module xBitlocker
Node "E15-1"
{
#First install the required Bitlocker features
WindowsFeature BitlockerFeature
{
Name = 'Bitlocker'
Ensure = 'Present'
IncludeAllSubFeature = $true
}
WindowsFeature BitlockerToolsFeature
{
Name = 'RSAT-Feature-Tools-Bitlocker'
Ensure = 'Present'
IncludeAllSubFeature = $true
}
#This example enables Bitlocker on the Operating System drive using both a RecoveryPasswordProtector and a StartupKeyProtector
xBLBitlocker Bitlocker
{
MountPoint = 'C:'
PrimaryProtector = 'RecoveryPasswordProtector'
StartupKeyProtector = $true
StartupKeyPath = 'A:'
RecoveryPasswordProtector = $true
AllowImmediateReboot = $true
UsedSpaceOnly = $true
DependsOn = '[WindowsFeature]BitlockerFeature','[WindowsFeature]BitlockerToolsFeature'
}
}
}
ConfigureBitlockerOnOSDrive
#Start-DscConfiguration -Verbose -Wait -Path .\ConfigureBitlockerOnOSDrive -ComputerName "E15-1"