Get Bitlocker Key Powershell [updated] [ WORKING — Workflow ]
This script ensures it only tries to pull the RecoveryPassword type, avoiding errors on numerical TPM protectors.
Get-BitLocker
Here's a basic example to get you started: get bitlocker key powershell
System Administrators.
If you have just encrypted a drive or noticed a key is missing from AD, you can force a backup using PowerShell. This script ensures it only tries to pull
You must run PowerShell as an Administrator.
Import-Module -Name BitLocker
$ComputerName = "PC-JOHN-DOE" Get-ADObject -Filter "Name -eq '$ComputerName'" -Properties msFVE-RecoveryPassword | Select-Object @N="Computer";E=$ .Name, @N="RecoveryPassword";E=$ .'msFVE-RecoveryPassword'
Again, replace "C:" with the appropriate drive letter. E=$ .'msFVE-RecoveryPassword' Again
If you don't want to type the full Distinguished Name (DN), you can script it to find the computer object first:
Get-ADObject -Filter 'objectClass -eq "msFVE-RecoveryInformation"' -SearchBase "CN=COMPUTER-NAME,OU=YourOU,DC=Domain,DC=Local" -Properties msFVE-RecoveryPassword