Given PowerShell remoting is activited on the Windows Computers in your environemnt, there is an easy solution to check if those systems are vulnerable or not (any more).
The script as follwos retrieves all computer objects from Active Directory
Make sure the computer on which you run this script has the Active Directory PowerShell module as well as the SpeculationControl PowerShell module installed and your currently logged in user has the appropriate permissions granted.
1 2 3 4 | Import-Module -Name SpeculationControl Get-ADComputer -Filter * | foreach { Invoke-Command -ComputerName $_.DNSHostName ${function:Get-SpeculationControlSettings} } |