

(For More Info: ) Step 2 – Set the required permissions to view Recovery Information If not you will need to extend your schema. Get-ADObject -SearchBase ((GET-ADRootDSE).SchemaNamingContext) -Filter Īfter running the command you can see like the following output result.

If you are on Windows server 2008 or higher and have PowerShell, you can run the following command snippet.
#RETRIEVE BITLOCKER RECOVERY KEY COMMANDS HOW TO#
Let’s start how to configure it step by step Step 1 – Verify your schema is ready Because in some cases, BitLocker can prompt type to recovery key if detects a specific behavior of partition changes or else users forget the decryption key.īitLocker can use an enterprise’s existing Active Directory Domain Services (AD DS) infrastructure to remotely store recovery keys on domain-joined computers. If you are looking at implementing BitLocker in an enterprise environment, one of the most important things is to manage BitLocker recovery keys on each and every computer in your organization. Rather than installing third-party software to do encryption, Microsoft has introduced the BitLocker drive encryption feature built into the Operating System. So what happens if the laptop is lost or stolen? and how can we ensure that the data inside that laptop does not fall into the wrong person’s hands? The best solution is Encryption.

Most organizations are always concerned about the security of data on their mobile users’ laptops. Retrieve recovery key from Active Directory
