Closed HotCakeX closed 1 year ago
When BitLocker's Personal Vault is unlocked, it will appear in Get-BitLockerVolume
with a drive letter similar to the one above
\\?\Volume{a9bdb7be-0000-0000-0000-100000000000}\
We can see in the results of the Get-Volume
that the drive belongs to OneDrive personal vault
Using
-ErrorAction SilentlyContinue
withGet-BitLockerVolume
cmdlet because after running the Microsoft Security baseline category, if there is a flash drive attached to the device, you "might" see this error in the BitLocker category:It only suppresses Non-terminating errors
The update will be released as part of the module soon as well.
The reason that error is thrown is that Microsoft Security Baselines apply a policy that forces all removable drives to be encrypted with BitLocker otherwise they will be read-only and have possibly other limitations.
That policy is reverted if you apply Microsoft Security Baselines with the optional overrides, but that's not enough for the
Get-BitLockerVolume
cmdlet and it still throws error, this is why it is now equipped with-ErrorAction SilentlyContinue
to take care of this situation.