menu favorite

Get Bitlocker Key Powershell [updated] [ WORKING — Workflow ]

This script ensures it only tries to pull the RecoveryPassword type, avoiding errors on numerical TPM protectors.

Get-BitLocker

Here's a basic example to get you started: get bitlocker key powershell

System Administrators.

If you have just encrypted a drive or noticed a key is missing from AD, you can force a backup using PowerShell. This script ensures it only tries to pull

You must run PowerShell as an Administrator.

Import-Module -Name BitLocker

$ComputerName = "PC-JOHN-DOE" Get-ADObject -Filter "Name -eq '$ComputerName'" -Properties msFVE-RecoveryPassword | Select-Object @N="Computer";E=$ .Name, @N="RecoveryPassword";E=$ .'msFVE-RecoveryPassword'

Again, replace "C:" with the appropriate drive letter. E=$ .'msFVE-RecoveryPassword' Again

If you don't want to type the full Distinguished Name (DN), you can script it to find the computer object first:

Get-ADObject -Filter 'objectClass -eq "msFVE-RecoveryInformation"' -SearchBase "CN=COMPUTER-NAME,OU=YourOU,DC=Domain,DC=Local" -Properties msFVE-RecoveryPassword