{"id":14147,"date":"2019-04-19T02:11:07","date_gmt":"2019-04-19T02:11:07","guid":{"rendered":"https:\/\/www.top-password.com\/blog\/?p=14147"},"modified":"2019-04-19T02:15:45","modified_gmt":"2019-04-19T02:15:45","slug":"find-bitlocker-recovery-key-from-active-directory","status":"publish","type":"post","link":"https:\/\/www.top-password.com\/blog\/find-bitlocker-recovery-key-from-active-directory\/","title":{"rendered":"Easy Ways to Find BitLocker Recovery Key from Active Directory"},"content":{"rendered":"

BitLocker is prompting for a recovery key and you lost it? Applying the GPO to store BitLocker recovery password in Active Directory<\/a> is a good practice for companies when data security is a concern. In this tutorial we’ll show you different ways to find BitLocker recovery key\/password from Active Directory or Azure AD.<\/p>\n

Method 1: Find BitLocker Recovery Key in AD Using PowerShell<\/strong><\/p>\n

    \n
  1. Press the Windows key + X and then select “Windows PowerShell (Admin)<\/strong>” from the Power User Menu.\n

    \"\"\n<\/li>\n

  2. Copy and paste the following script into the PowerShell console and hit Enter. Substitute “PCUnlocker<\/em>” with the name of the computer you want to locate BitLocker recovery key for.\n

    $objComputer = Get-ADComputer PCUnlocker
    \n$Bitlocker_Object = Get-ADObject -Filter {objectclass -eq 'msFVE-RecoveryInformation'} -SearchBase $objComputer.DistinguishedName -Properties 'msFVE-RecoveryPassword'
    \n$Bitlocker_Object<\/code><\/p>\n

    \"\"\n<\/li>\n

  3. It will retrieve all details from the ‘msFVE-RecoveryInformation<\/strong>‘ objects attached to your target computer. The msFVE-RecoveryPassword<\/strong> item is the BitLocker recovery key you’re looking for.<\/li>\n<\/ol>\n

    Method 2: Using BitLocker Recovery Password Viewer Utility<\/strong><\/p>\n

    If you’ve enabled the BitLocker Recovery Password Viewer feature<\/a> in Active Directory, it’s pretty simple to retrieve BitLocker recovery key for any computer in AD. Follow these steps:<\/p>\n

      \n
    1. After opening the Active Directory Users and Computers snap in, expand your domain and click the Computers<\/strong> container. Right-click on your target computer object and select Properties<\/strong>.\n

      \"\"\n<\/li>\n

    2. Go to the Bitlocker Recovery<\/strong> tab, you can view all BitLocker recovery keys that were automatically backed up to AD.\n

      \"\"\n<\/li>\n<\/ol>\n

      If you know the first 8 digits of the Password ID, here’s how to search your BitLocker recovery keys:<\/p>\n

        \n
      1. Right-click on your domain in the left pane of Active Directory Users and Computers snap in, and then select Find BitLocker recovery password<\/strong>.\n

        \"\"\n<\/li>\n

      2. Enter the first 8 characters of Password ID and click on Search<\/strong>.\n

        \"\"\n<\/li>\n

      3. It will locate the matching BitLocker recovery keys that are stored in your Active Directory.<\/li>\n<\/ol>\n

        Method 3: Locate BitLocker Recovery Key in Azure AD<\/strong><\/p>\n

        Once the BitLocker recovery key is backed up to Azure AD, users can find their own keys in the Profile<\/strong> section after signing into https:\/\/account.activedirectory.windowsazure.com\/profile\/<\/a>. Administrators can log in to https:\/\/account.activedirectory.windowsazure.com\/n\/#\/devices<\/a>, select the appropriate device, and click View Details<\/strong> to get the BitLocker recovery key.<\/p>\n","protected":false},"excerpt":{"rendered":"

        BitLocker is prompting for a recovery key and you lost it? Applying the GPO to store BitLocker recovery password in Active Directory is a good practice for companies when data security is a concern. In this tutorial we’ll show you different ways to find BitLocker recovery key\/password from Active Directory or Azure AD. Method 1: […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[92,1],"tags":[4185,4183,4184,4186],"class_list":["post-14147","post","type-post","status-publish","format-standard","hentry","category-active-directory-password","category-others","tag-azure-ad-bitlocker-recovery-key","tag-find-bitlocker-recovery-key-from-ad","tag-get-bitlocker-recovery-key-from-ad-powershell","tag-recover-bitlocker-recovery-key-in-ad"],"_links":{"self":[{"href":"https:\/\/www.top-password.com\/blog\/wp-json\/wp\/v2\/posts\/14147","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.top-password.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.top-password.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.top-password.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.top-password.com\/blog\/wp-json\/wp\/v2\/comments?post=14147"}],"version-history":[{"count":15,"href":"https:\/\/www.top-password.com\/blog\/wp-json\/wp\/v2\/posts\/14147\/revisions"}],"predecessor-version":[{"id":14168,"href":"https:\/\/www.top-password.com\/blog\/wp-json\/wp\/v2\/posts\/14147\/revisions\/14168"}],"wp:attachment":[{"href":"https:\/\/www.top-password.com\/blog\/wp-json\/wp\/v2\/media?parent=14147"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.top-password.com\/blog\/wp-json\/wp\/v2\/categories?post=14147"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.top-password.com\/blog\/wp-json\/wp\/v2\/tags?post=14147"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}