Don't forget to refresh if you've left it open. If you now look at the computer object within AD you should see the recovery key. PS C:\> Backup-BitLockerKeyProtector -MountPoint "C:" -KeyProtectorId $įor more details, please refer to the official article from Microsoft: Any help would be appreciated Thanks in advance.
IThis script pulls all computers but I am struggling to sort out computers with keys. Now from a domain admin account open PowerShell and insert the following command: PS C:\> $BLV = Get-BitLockerVolume -MountPoint "C:" I have found this Powershell script and am having trouble modifying it to only pull Computer objects that do not have a BitLocker Key stored in AD. Computer Configuration> Administrative Templates> Windows Components> Bitlocker Drive Encryption> Operating System Drives>Choose how Bitlocker-protected operating system drives can be recovered, make sure this is set to enabled.
If the feature has been added in AD, please try the following detailed steps:įirst, please make sure that your GPO setup to save the recovery key to AD DS. Whether the feature BitLocker Recovery Password Viewer was installed in AD? Before being able to view the BitLocker Recovery keys in AD you need to install the BitLocker Password Recovery Viewer feature. Open up Active Directory Users and Computers (ADUC) Right-Click on the domain ou. Select Find BitLocker recovery password Enter in the.
0 kommentar(er)
