Backup BitLocker recovery keys in AD for existing encrypted drives using GPO Windows server 2022