Windows Server 2012 manage-bde -status error

Jonatan Glaza 21 Reputation points
2020-09-09T07:48:09.19+00:00

Hi,
I have small program that reads bitlocker data from domain computers. The program uses "manage-bde -status C: -cn [pc name]" command. The thing is that on my admin pc it works - checks data from pc's. But on windows server 2012. It reads half the data and throws an error 0x80070057. There should be encryption method field, protection status, lock status, id field and key protectors. But it just throws an error any ideas?

23445-imgs.png

Screenshot is from cmd not my app so it's something on a server.

Windows Server 2012
Windows Server 2012
A Microsoft server operating system that supports enterprise-level management, data storage, applications, and communications.
1,564 questions
0 comments No comments
{count} votes

Accepted answer
  1. MTG Marinetechnik 356 Reputation points
    2020-09-09T08:14:34.147+00:00

    What I would do: don't query computers from remote. Instead, deploy an immediate scheduled task that reads out this status and writes to a logfile.
    For further info, refer to my article https://www.experts-exchange.com/articles/33771/We-have-bitlocker-so-we-need-MBAM-too.html


2 additional answers

Sort by: Most helpful
  1. Dale Kudusi 3,226 Reputation points
    2020-09-10T07:16:55.447+00:00

    Hi
    You could try checking the file system, file system metadata and fixing the errors on the disk.

    Open elevated command prompt,
    type chkdsk /r /b /f on the faulty drive
    reference: https://video2.skills-academy.com/en-us/windows-server/administration/windows-commands/chkdsk

    I hope this information above can help you.

    ============================================

    If the Answer is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments No comments

  2. Jonatan Glaza 21 Reputation points
    2020-09-10T11:43:08.963+00:00

    Hi thanks all, I checked almost all pcs from powershell. The ones that have method encryption = Hardware Encryption Returns full data. I don't know why. Perhaps @MTG Marinetechnik is right "and server 2012 does not understand the encryption algorithm XTS_AES". It would explain why from my pc it works flawlessly and on server not. And I don't think disc is corrupted becouse I checked on second Domain Controller and it's the same - and it's also Server 2012. I think the case is closed it's 2012 fault. Again Thanks guys.

    0 comments No comments