Incorrect Active Directory Bitlocker password

Question

Hello everyone,
Where I work we have enabled a group policy that saves all BitLocker passwords automatically to AD for safety and accuracy. One of our laptops restarted and it now requires BitLocker password, and when we tried using the password that was saved automatically in AD it says that it's incorrect? Why would the password that was saved automatically in AD be incorrect? Please help. Thank you.

Answer 1

You need to understand that on the Bitlocker recovery dialog, it mentions a recovery key ID. Only if that ID matches the ID of the numerical password that you see saved in AD will the password work.

Probably, the drive was re-encrypted and a different recovery password was created and that time not saved to AD so what you see in AD is an outdated password. You will be able to tell by comparing the recovery password IDs.