Get-ADComputer -Identity "COMPUTER-NAME" -Properties BitLockerRecoveryKeys | Select-Object -ExpandProperty BitLockerRecoveryKeys Use code with caution. Find Key by Password ID
To retrieve a BitLocker recovery key from Active Directory (AD) , you must have the BitLocker Recovery Password Viewer get bitlocker recovery key from active directory
The computer may have encrypted its drive while disconnected from the corporate network or before the GPO was applied. You can force an online machine to back up its current key to AD manually by executing the following command in an elevated Command Prompt on the local machine: manage-bde -protectors -adbackup C: -id PROTECTOR-ID Use code with caution. This report should be stored in a secure,
This report should be stored in a secure, offline location as an emergency backup. Each key has: ADAC gives a cleaner view,
This guide outlines the steps to locate and export BitLocker recovery keys using the console and PowerShell .
You will see a list of all recovery passwords backed up for that machine. Each key has:
ADAC gives a cleaner view, especially in Windows Server 2012+.