Bitlocker Recovery Key not present in AD for some users

Question

Hello,

I have a weird situation where the same BitLocker group policy is applied to all users, BitLocker is enabled on each PC but I have recovery keys in AD for only like half of them. Is there any way to remotely generate recovery keys for the PCs that don't have it? BitLocker Recovery key tab is present on each device, just the key is present only on some of them.
It would be very hard to go to each on of the devices and manually push the keys from there.

Thank you in advance!

Answer 1

Hello @Valyu Valev ,

Thank you for posting here.

To better understand our question, please confirm the following information at your convenience。

1.Based on "I have a weird situation where the same BitLocker group policy is applied to all users", what BitLocker group policy settings did you configure for all users?

2.Based on "but I have recovery keys in AD for only like half of them", would you please take a screenshot for one ad user to us? Where can you see recovery keys in AD?

3.Based on "BitLocker Recovery key tab is present on each device, just the key is present only on some of them", would you please take a screenshot for one ad user to us? Where can you see BitLocker Recovery key tab on each device?

Should you have any question or concern, please feel free to let us know.

Best Regards,
Daisy Zhou

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.

Answer 2

Hello DaisyZhou,

Thank you for your response!

The settings for BitLocker were not configured by me but by the previous sys admin, however the same policy is applied to all devices (they're in the same OU, all of them have the BitLocker Recovery tab, but on some of the - it's empty).

Store BitLocker recovery information Active Directory Domain is enabled.

Here is a screen from BitLocker recovery tab from the properties menu of the device itself.
This on has rec key.

Answer 3

Hello @Valyu Valev ,

Thank you for your update.

I am sorry for the late reply.

Here is a similar case with marked answer.

https://community.spiceworks.com/topic/331071-active-directory-can-t-see-bitlocker-recovery-key-tab-in-computer-properties

Please note: Information posted in the given link is hosted by a third party. Microsoft does not guarantee the accuracy and effectiveness of information.

Should you have any question or concern, please feel free to let us know.

Best Regards,
Daisy Zhou

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.