This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(217.60000000000002, 61%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERF%3C/text%3E%3C/svg%3E)
I am doing installations for a company. We are using Windows 10 Pro on Lenovo Desktops. On most of the machines, bitlocker works just fine, it installs and asks me where I want to save
the key file, on others there is no option where it asks where I want to save the file. Is there a solution to this. We must have encryption on all machines and if it isn't asking me where to save the file is it even working. I even cleared the TPM with no difference.
thanks for the help!
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(108.80000000000001, 77%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EM%3C/text%3E%3C/svg%3E)
Richard, the recovery options may be omitted if the key is saved to AD automatically. So if these machines where you don't see the option to save the key feature a key on their AD object's Bitlocker recovery tab, then you have found the reason.
How can I tell (and where do I look) to see if the keys are automatically saved?
I have a picture of a normal bitlocker setup screen and one that i am seeing currently. Can you tell me how to get the normal screen?
thanks!
It's funny. You get advice but give no feedback at all.
Sorry, I would have left feedback if I had understood the answer. I am not very knowledgeable with AD, just basic password resets. This is why I posted the 2nd post with pictures of what I see.
Thanks for understanding
Look at the computer objects in Active directory users and computers (aduc.msc) and compare to this picture:
If you see such a tab and its populated, then there will be a GPO active on some computers which will have enforced this automated AD backup and thus, no need to ask for recovery key saving.
