IT Support Playbooks / IT Support Guides
Check BitLocker protection before servicing a Windows device
Hardware service, firmware changes and device recovery can trigger encryption-related requirements. Inspect protection state and confirm recovery readiness before maintenance.
Environment and inputs: Everyday IT support · Windows PowerShell examples unless specified
Try the diagnostic command
Use the stated shell and platform. Replace sample domains, addresses, services and paths with values from the system you are authorized to support.
manage-bde -status C:How to read the result
In an authorized Windows terminal, the output describes encryption and protection state for the selected volume. Encryption percentage and protection status are separate fields.
What to do next
Confirm the volume and follow the organization's process for checking that a recovery key is safely escrowed. Plan any required suspension and re-enablement through the approved maintenance procedure.
Before you make a change
Never paste recovery keys into an ordinary ticket or public chat. This status command does not prove the stored recovery key is current or accessible.