<< Click to Display Table of Contents >> Disk Drives Data Sources |
Where the data on the Disk Drives page of the Computer window comes from. See Computer Window Data Sources for how to read the Source column, and for the other pages of the Computer window.
Collected by the Disks scanner.
One row per physical disk, from WMI Win32_DiskDrive.
Field |
Source |
Derivation / Notes |
|---|---|---|
Drive ID |
WMI |
Win32_DiskDrive.DeviceId, for example \\.\PHYSICALDRIVE0. |
Size |
WMI |
Win32_DiskDrive.Size. |
Manufacturer |
WMI |
Win32_DiskDrive.Manufacturer. Most drives report a generic value here, so use Model. |
Model |
WMI |
Win32_DiskDrive.Model. |
Description |
WMI |
Win32_DiskDrive.Description. |
Physical Disk Type |
WMI (Enterprise) |
MSFT_PhysicalDisk.MediaType from the root\Microsoft\Windows\Storage namespace, matched to the drive by disk number and decoded to HDD, SSD, SCM, or Unspecified - this is what distinguishes an SSD from a spinning disk. Reads Not Available when the Storage namespace could not be queried, which is different from Unspecified. |
Interface |
WMI |
Win32_DiskDrive.InterfaceType, for example SCSI, IDE, or USB. |
Media |
WMI |
Win32_DiskDrive.MediaType, which only distinguishes fixed from removable media. |
Serial Number |
WMI |
Win32_DiskDrive.SerialNumber, falling back to Win32_PhysicalMedia.SerialNumber for the same drive when the first value is empty. |
Firmware Revision |
WMI |
Win32_DiskDrive.FirmwareRevision. |
SMART Status |
WMI (Enterprise) |
Win32_DiskDrive.Status. Windows reports OK until the drive's own SMART logic raises a predicted failure, so this is a coarse indicator, not a health score. |
One row per drive letter, from WMI Win32_LogicalDisk, linked back to its physical disk through the Win32_LogicalDiskToPartition and Win32_DiskDriveToDiskPartition associations. Volumes with no drive letter are not listed.
Field |
Source |
Derivation / Notes |
|---|---|---|
Disk ID |
WMI |
Win32_LogicalDisk.DeviceId - the drive letter. |
Size |
WMI |
Win32_LogicalDisk.Size. |
Free Space |
WMI |
Win32_LogicalDisk.FreeSpace. |
Free % |
Calculated |
Free Space divided by Size. |
File System |
WMI |
Win32_LogicalDisk.FileSystem. |
Local |
WMI |
Derived from Win32_LogicalDisk.DriveType, but only as "the drive type is known" - any non-zero type is stored as Yes. Removable, network, and optical drives therefore also read Yes, so this column will not separate local disks from the rest. Use File System or the linked Drive ID for that. |
Serial Number |
WMI |
Win32_LogicalDisk.VolumeSerialNumber, formatted as XXXX-XXXX. This is the volume serial, which changes when the volume is reformatted, not the drive's hardware serial. |
BitLocker Protection |
WMI (Enterprise) |
Win32_EncryptableVolume.ProtectionStatus from the ROOT\CIMV2\Security\MicrosoftVolumeEncryption namespace. |
BitLocker Is Locked |
WMI (Enterprise) |
The GetLockStatus method of Win32_EncryptableVolume. Hidden. |
BitLocker Encryption |
WMI (Enterprise) |
The GetEncryptionMethod method, decoded to text such as XTS-AES 256 or AES 128. Hidden. |
BitLocker Version |
WMI (Enterprise) |
The GetVersion method, decoded to Vista or Win7. Hidden. |
BitLocker Conversion Status |
WMI (Enterprise) |
The GetConversionStatus method, decoded to Fully Encrypted, Fully Decrypted, Encryption In Progress, and so on. Hidden. |
BitLocker % Encrypted |
PowerShell (Enterprise) |
The EncryptionPercentage property returned by Get-BitLockerVolume run on the target. This is the one BitLocker column that needs PowerShell rather than WMI. Hidden. |
BitLocker ID Field |
WMI (Enterprise) |
The GetIdentificationField method - the organisational identifier stamped on the volume. Hidden. |
BitLocker Auto Unlock |
WMI (Enterprise) |
The IsAutoUnlockEnabled method. Hidden. |
BitLocker Key Protectors |
WMI (Enterprise) |
The GetKeyProtectors method, with each protector type decoded to text such as Trusted Platform Module (TPM) or Numerical password, joined with commas. Recovery keys themselves are never collected. Hidden. |
NOTE: All BitLocker values require the scan account to reach the encryption namespace on the target. When it cannot, the text columns stay blank but BitLocker Protection is stored as No, which is indistinguishable from a genuinely unprotected volume. Before treating a No as an unencrypted disk, check that the other BitLocker columns hold values - all blank alongside a No usually means the volume was never read.
© 2026 PDQ.com Corporation. All rights reserved.
PDQ.com is a trademark of PDQ.com Corporation. All other product and company names are the property of their respective owners.
Help Version: 20.1.28.0