Examples/ConfigureBitlockerAndAutoBitlocker/ConfigureBitlockerAndAutoBitlocker.ps1
|
Configuration ConfigureBitlockerAndAutoBitlocker { Import-DscResource -ModuleName PSDesiredStateConfiguration Import-DscResource -ModuleName xBitlocker Node 'localhost' { # First install the required Bitlocker features WindowsFeature BitlockerFeature { Name = 'Bitlocker' Ensure = 'Present' IncludeAllSubFeature = $true } WindowsFeature BitlockerToolsFeature { Name = 'RSAT-Feature-Tools-Bitlocker' Ensure = 'Present' IncludeAllSubFeature = $true } # This example enables Bitlocker on the Operating System drive using both a RecoveryPasswordProtector and a StartupKeyProtector xBLBitlocker Bitlocker { MountPoint = 'C:' PrimaryProtector = 'RecoveryPasswordProtector' StartupKeyProtector = $true StartupKeyPath = 'A:' RecoveryPasswordProtector = $true AllowImmediateReboot = $true UsedSpaceOnly = $true DependsOn = '[WindowsFeature]BitlockerFeature', '[WindowsFeature]BitlockerToolsFeature' } # This example sets up AutoBitlocker for any drive of type Fixed with a RecoveryPasswordProtector only. xBLAutoBitlocker AutoBitlocker { DriveType = 'Fixed' PrimaryProtector = 'RecoveryPasswordProtector' RecoveryPasswordProtector = $true UsedSpaceOnly = $true # Don't enable AutoBL until the OS drive has been encrypted DependsOn = '[xBLBitlocker]Bitlocker' } } } ConfigureBitlockerAndAutoBitlocker |