Get command status from Active Directory Domain machines

1. Last Windows Update Status
2. BitLocker Status (Installed and Configured)
3. Total Local Admin Users
4. LAPS (Local Administrator Password Solution) Installed Status

You can collect this information in multiple ways, but since you mentioned that PowerShell script execution is disabled via GPO, the approach will need to be adapted accordingly. One way to bypass that restriction is by using Group Policy (GPO) to run a scheduled task or to use PowerShell Remoting (if remoting is allowed) to run the script on the machines.

Approach Overview

• PowerShell Remoting: Enable PowerShell Remoting using Enable-PSRemoting on the machines and run the script via remoting from a central management machine.
• GPO for Scheduled Task: You can use Group Policy to create a scheduled task that runs the script at specific times. The output can be saved on a shared network folder or sent via email.

PowerShell Script to Gather Required Status

Below is a PowerShell script that can retrieve the status of the desired commands