Find Bitlocker Key In Active Directory | Tested & Top

Since Windows Server 2008 and Windows Vista, Microsoft has allowed BitLocker recovery information to be escrowed directly into AD. Here is your definitive guide to finding that key.

# Import the AD module Import-Module ActiveDirectory $ComputerName = "LAPTOP-JSMITH" $Computer = Get-ADComputer -Identity $ComputerName -Properties * Retrieve the BitLocker recovery password Get-ADObject -Filter {objectclass -eq 'msFVE-RecoveryInformation'} -SearchBase $Computer.DistinguishedName -Properties 'msFVE-RecoveryPassword' find bitlocker key in active directory

You have three primary tools to pull that golden key. Start with the simplest. Since Windows Server 2008 and Windows Vista, Microsoft

The IT Pro’s Lifesaver: How to Find the BitLocker Recovery Key in Active Directory (and Why You Should Be Storing Them There) find bitlocker key in active directory

Note: Look for the msFVE-RecoveryPassword field in the output. That is your key.