Hi, i need to find out how many laptops are not encrypted in our domain. In the reports tool there is not such an utility. We also use some software audit tool, but safeboot never shows up in the report as it doesn't appear on the Add/remove Programs. Because many people are always traveling or working from home and some of hem rarely come to the office, i need to find out if some of this guys don't have the laptop encrypted. Do you know how can i do that? Thanks
HI, i don't have access to ePO, i think it's another product and needs to be purchased, right? if a use the sbadmcl.exe -command:getcryptstate >t.txt It will only get me the status of the computers with safeboot installed. What i need is find out if there are any computers without safeboot installed on the domain. Thanks
what happens if you run the command on a machine without EEPC installed?
ePO is included with your purchase of EEPC. You can get hold of it, but it's heavy - it's an enterprise class management system so you may not want to invest the time and energy to install it unless you have a lot of PCs.
Just run the sbadmcl.exe command in your login script or something, and write some logic to append the machine name to a file if EEPC is not installed. You'll soon build up a list of the machines which are not protected.
remember, just looking for the files of EEPC won't tell you if the machine is protected or not - you need to check the crypt state. That will tell you one of three things:
1. not installed 2. installed but not protected 3. installed and protected
it's the "not item 3" which you really need to track.
Hi, you are right... I run it now with an encrypted machine and got the right output Drive(Letter=C) State = Full Drive(Letter=E) State = Full Drive(Letter=F) State = None
But if i run this as a startup script i'm gonna end with loads of txt files with i am going to have to check manually for the success report and then check whether if they are laptops or not. I am talking on a enviroment of around 1500 machines with 600 laptops encrypted. Will it be better to install ePO? Thanks