Bitlocker script

Can someone please give me step by step instructions from scratch to install the bitlocker vbs script in the link using GPO? I have never done it before.  I get the error in the pictures when I try.


https://gallery.technet.microsoft.com/scriptcenter/780d167f-2d57-4eb7-bd18-84c5293d93e3
bitlocker.png
bitlocker1.png
Thomas NSystems Analyst - Windows System AdministratorAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

McKnifeCommented:
The first attachment suggests that you have forgotten the most important parameter of all: -on (which turns on bitlocker).
Mike TLeading EngineerCommented:
Hi,

Forget the GPO for now. You need to know how to run it manually first. When that works just create a new GPO as your normally would.

As in the Q &A tan, the answer of how to run it is:

 cscript bitlocker.vbs /on:tpm /l:c:\temp\bitlocker.log

The key is to use the cscript.exe engine. The /on:TPM turns the TPM chip on, and the rest creates a log file.

Other parameters are:

'Script arguments

'/on:<tpm,tp,tsk,usb>                used to specify options for turning on BitLocker (tpm,tp,tsk) REQUIRED
'/l:<location>                         specify to create a log file and it's location REQUIRED
'/em:<128d,256d,128,256>             used to specify encryption algorithm (aes128d, aes256d, aes128, aes256) OPTIONAL
'/rk                                 create a recovery key and store in a particular location  OPTIONAL
'/promptuser                        causes script to prompt user for TPM PIN or to insert USB drive OPTIONAL
'/sms                                creates an SMS status MIF for software distribution OPTIONAL
'/ro:"<existingTPMownerpassword>"    changes the TPM ownership password (password must be placed between "") OPTIONAL

Mike
Thomas NSystems Analyst - Windows System AdministratorAuthor Commented:
Thanks Mike,
    Im not sure about csscript but I created a simple .bat file and pointed to the .vbs script. The errors are gone but when I click on it, it asks me to run the .vbs script, I hit okay and nothing happens? Any suggestions. I want to get it working manually first.
Mike TLeading EngineerCommented:
Hi,

cscript.exe is the scripting engine. A bat file calling the VBS will work but will indeed just call the VBS. There are two ways to run VBS files: wscript or cscript.

Wscript is for scripts that produce a GUI
cscript is for scripts that *must* run on the command-line and can't use any GUI (i.e. pop up any windows for output).

I didn't read the script but I'm pretty sure it will need cscript. If you type this:

 cscript bitlocker.vbs /on:tpm /l:c:\temp\bitlocker.log

in a command window it will create a log file in c:\temp. c:\temp must exist first for it to work.
Open the log file in notepad to see what the script did.

Mike

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Thomas NSystems Analyst - Windows System AdministratorAuthor Commented:
ok Mike I will try and come back to reward points
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
VB Script

From novice to tech pro — start learning today.