From Active Directory __top__: Get Bitlocker Recovery Key
Get-ADObject -Filter objectClass -eq 'msFVE-RecoveryInformation' -Properties msFVE-RecoveryPassword, msFVE-KeyPackage -SearchBase (Get-ADComputer $ComputerName).DistinguishedName
How to Get All BitLocker-Enabled Computers in Active Directory
Enter the first eight characters of the ID provided by the user to pinpoint the correct object and key. C. Automation via PowerShell get bitlocker recovery key from active directory
If you followed the steps above and found no "BitLocker Recovery" tab or no keys listed, consider the following:
:Run the following script, replacing COMPUTER_NAME with the actual name: powershell Note: If you don’t see this tab, the
Click the tab. Note: If you don’t see this tab, the recovery information was never backed up, or you lack permissions.
manage-bde -protectors -get C: manage-bde -protectors -adbackup C: -id "YOUR-KEY-ID" Use code with caution. : powershell only Domain Administrators
Before you can view these keys, your environment must meet specific requirements: Administrative Permissions : By default, only Domain Administrators