Everyone knows you can use Get-ADGroup -Recursive, but what about other options?
So you want to calculate the ImmutableID... the hard way? Here's how I did it.
There are a lot of different ways to enable BitLocker, but they all seem to involve some sort of script or tool. My process uses just Group Policy Preferences and the manage-bde.exe included in every version of windows that suppports BitLocker.