BitLocker key not saving at azure ad account

Question

Hey,

There are two Windows machines in my organization that do not have their bitlocker keys saved in their AD accounts.

When they click on the option to save it to the ad account, it appears as though it is saved, but I cannot find it in the portal.

Is there anyone who knows why this is happening?

Answer 1

@Eyal Tzaig, Thanks for posting in Q&A. For the two affected devices, please ensure the following policy setting is enabled when deploy BitLocker policy from Intune to them.

Sync on the device side, Settings-> Accounts->Access work or school, the account, info, click sync to see if it can appear on Microsoft Entra ID (AAD) device record after some time.

On the other hand, you can try "BackupToAAD-BitLockerKeyProtector" to manually save recovery key to AAD device record.

https://learn.microsoft.com/en-us/powershell/module/bitlocker/backuptoaad-bitlockerkeyprotector?view=windowsserver2022-ps

Or you can also consider this script to do this.

Hope the above information can help.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.