Enable BitLocker - Desktop

Summary

Runs Initialize and Audit BitLocker on Windows desktops when BitLocker Initialization - Detection finds that the desktop's BitLocker state does not match the cPVAL custom fields. It applies to desktops where cPVAL BitLocker Enable is Windows, Windows Workstations or Windows Desktops, and checks them every 24 hours.

A workstation counts as a desktop when Windows has not detected a battery on it, which includes all-in-ones, mini PCs and virtual machines. The compound condition checks this with the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\ACPI\PNP0C0A, which Windows creates for a laptop battery. Enable BitLocker - Laptop covers the workstations that have one.

Details

• Name: Enable BitLocker - Desktop
• Description: Runs Initialize and Audit BitLocker on Windows desktops where cPVAL BitLocker Enable is Windows, Windows Workstations or Windows Desktops and the detection script finds a needed fix.
• Recommended Agent Policies: Windows Workstation Policy [Default]

Dependencies

• Custom Field - cPVAL BitLocker Enable
• Automation - BitLocker Initialization - Detection
• Automation - Initialize and Audit BitLocker
• Solution - BitLocker Initialize - NinjaOne

Compound Condition Creation

Compound Condition Configuration

Changelog

2026-10-26

• Initial version of the document