Enable BitLocker - Laptop

Summary

Runs Initialize and Audit BitLocker on Windows laptops when BitLocker Initialization - Detection finds that the laptop's BitLocker state does not match the cPVAL custom fields. It applies to laptops where cPVAL BitLocker Enable is Windows, Windows Workstations or Windows Laptops, and checks them every 24 hours.

A workstation counts as a laptop when Windows has detected a battery on it. The compound condition checks this with the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\ACPI\PNP0C0A, which Windows creates for a laptop battery. Enable BitLocker - Desktop covers the other workstations.

Details

• Name: Enable BitLocker - Laptop
• Description: Runs Initialize and Audit BitLocker on Windows laptops where cPVAL BitLocker Enable is Windows, Windows Workstations or Windows Laptops and the detection script finds a needed fix.
• Recommended Agent Policies: Windows Workstation Policy [Default]

Dependencies

• Custom Field - cPVAL BitLocker Enable
• Automation - BitLocker Initialization - Detection
• Automation - Initialize and Audit BitLocker
• Solution - BitLocker Initialize - NinjaOne

Compound Condition Creation

Compound Condition Configuration

Changelog

2026-10-26

• Initial version of the document