Comments on: Manually Backup BitLocker Recovery Key to AD

By: Ppl_are_idiots

Ppl_are_idiots

In reply to aron. Because BitLocker is on your machine, not the work network and once you're connected to the internet, you're connected to Azure.

By: Brain2000

Brain2000

So … what do you do when you need to get that key?
Just… you know, minor question there…

By: Robert

Robert

How do you backup keys to Azure AD through Command Line after the enabling Bitlocker through command prompt and backed up on AD. I just wanted to add another backup to Azure AD via command line.

By: Steve

Steve

Is there a way to automate this for machines that were encrypted before the GPO was applied? Don’t want to have to touch 25 machines if I can help it.

By: aron

aron

I’m running a test machine at home, disconnected from our work network….

Even though the GPO is applied, the system was able to enable Bitlocker AND when I type those commands, it even tells me the backup was successful!!!

Sounds like a bug.

By: @urel

@urel

Thanks Prajwal !!
Maybe a stupid question… how can you find the information in AD ?

By: Seth

Seth

Is there a way to query the server for a list of computers for which the recovery key was already backed up?

By: Sam Banford

Sam Banford

There’s also a PowerShell module available (must have Bitlocker feature enabled if in Server OS):
https://docs.microsoft.com/en-us/powershell/module/bitlocker/?view=win10-ps

Same functionality just different interface if you want/need.

By: Shreedhar R

Shreedhar R

Thank you Prajwal. This post really helped me.

By: Dwijen

Dwijen

Thanks that is really helpful