How to Check if BitLocker Protection is OFF in Windows Systems Using Saner

Overview
This article explains how to verify if BitLocker protection is OFF in Windows systems using Saner’s Endpoint Management module, schedule the query execution, and take corrective actions based on the results.

Prerequisites

Before beginning, ensure the following:

• You have access to the Saner console with permissions to use Endpoint Management.

• Saner agents are installed and active on the target Windows systems.

Steps to Check BitLocker Status

Step 1: Select Organization and Account

• Log in to Saner.

• Choose the Organization and corresponding Account where you want to check BitLocker status.

Step 2: Access Endpoint Management

• Select the Endpoint Management module.

Step 3: Open Checks

• Click on Checks at the top-right corner.

Step 4: Select Windows Device Management

• From the drop-down menu, select Windows → Device Management.

Step 5: Select BitLocker Status

• Scroll down to see highlighted checks in green.

• Select BitLocker Status.

Step 6: Schedule Query Execution

• Click Trigger to schedule the query execution for the agent.

• Fill in the Query Trigger Settings:

  • Query run count time in seconds.

  • Frequency in minutes to run the query.

  • Query Trigger Time Frame in the Schedule options pane.

• Click Update.

Step 7: Select Scope

• Click Scope to choose the target scope for the query.

Step 8: Submit Query

• Click Submit to send the query to the agent.

Step 9: View Results

• In the Result Pane, review BitLocker status details, including:

  • Device_ID

  • Device_Letter

  • Status

  • Host

  • Device Names

• You can also download the results in CSV format.

Step 10: Take Actions Based on Results

• Possible actions are listed in the bottom pane.

• Click the desired action to be redirected to the Create Response page.

• All responses created for this check can be viewed in Created Actions.

Note:
These steps allow administrators to confirm whether BitLocker protection is OFF and take immediate remediation actions to enforce device encryption policies.