Don't forget to refresh if you've left it open. If you now look at the computer object within AD you should see the recovery key. PS C:\> Backup-BitLockerKeyProtector -MountPoint "C:" -KeyProtectorId $įor more details, please refer to the official article from Microsoft: Common tasks In Active Directory Users and Computers, right-click the domain container, and then click Find BitLocker Recovery Password. Computer Configuration > Administrative Templates > Windows Components > Bitlocker Drive Encryption > Operating System Drives >Choose how Bitlocker-protected operating system drives can be recovered, make sure this is set to enabled.
Now from a domain admin account open PowerShell and insert the following command: PS C:\> $BLV = Get-BitLockerVolume -MountPoint "C:"
BitLocker encrypts disk volumes to protect the data on them from being accessed. Computer Configuration> Administrative Templates> Windows Components> Bitlocker Drive Encryption> Operating System Drives>Choose how Bitlocker-protected operating system drives can be recovered, make sure this is set to enabled. One of the items retrieved from active directory is the BitLocker recovery key. If the feature has been added in AD, please try the following detailed steps:įirst, please make sure that your GPO setup to save the recovery key to AD DS. Whether the feature BitLocker Recovery Password Viewer was installed in AD? Before being able to view the BitLocker Recovery keys in AD you need to install the BitLocker Password Recovery Viewer feature.
0 kommentar(er)
