
- #Lost bitlocker recovery key windows 10 command line how to#
- #Lost bitlocker recovery key windows 10 command line password#
#Lost bitlocker recovery key windows 10 command line password#
Note down the numerical password protector of the volume. Running the above command outputs the TPM details, Numerical password and BitLocker recovery key.

Open an elevated command prompt and run the below command. Otherwise you will see the error: Group Policy does not permit the storage of recovery information to Active Directory. Most of all remember that the below steps will work only if the client machine has received the group policy setting to save the information to AD. Encrypt your hard drive and temporarily save the recovery key in a file. If you have not enabled BitLocker encryption, you must first do that. On your Windows 10 computer, you can use manage-bde.exe command to save the recovery information in AD. So ensure you are using the correct account to perform the steps. You do not need to decrypt and re-encrypt the drive to store the recovery information in AD.įirst of all you require local admin rights to run manage-bde commands. There is an easy way to manually backup BitLocker Recovery key to Active Directory. Manually Backup BitLocker Recovery Key to AD However you might want to manually save the key to AD. You troubleshoot the issue and fix the group policy issue. You notice that computer object in AD doesn’t show the BitLocker recovery key.Probably the Group policy setting to save the recovery information to AD was not enabled at the time of encryption.Hence the recovery information couldn’t be saved to Active Directory. May be the machine was not connected to the network when BitLocker was enabled.You enable BitLocker encryption and join the machine to domain.You might now want to backup the BitLocker key to AD. Imagine that you have imaged a machine with Windows 10 OS.

There are some situations where you might need to manually upload the BitLocker key to AD :. When used with TPM, BitLocker provides the best security. However it requires a Trusted Platform Module (TPM) on the system.

This should also help you to backup recovery information in AD after BitLocker is turned ON in Windows OS.īitLocker is an encryption feature available in Windows 10 Professional and Enterprise editions.
#Lost bitlocker recovery key windows 10 command line how to#
In this post I will show you how to manually backup the BitLocker recovery key to Active Directory.
