I have created following PS script, which lists all computers that have msTPM-ownerinformation attribute populated. Get-QADComputer -sizelimit 0 -searchroot 'company.com/productionOU' -LdapFilter '(msTPM-ownerinformation=*) I made some tests in the lab and noticed that msTPM-ownerinformation attribute exists on all computer objects but only those with Bitlocker enabled, had some information on it. I was thinking, is there also other scenarios beside enabling Bitlocker when this attribute gets populated? Looking for reliable method to find computers with Bitlocker enabled.