Backup BitLocker Recovery keys to AD for Existing Encrypted Drives using GPO | Backup BitLocker Key

This video shows you the guidelines to backup Bitlocker recovery keys to Active Directory for devices that were pre-configured before configuring group policy. I am going to use Group Policy to automatically copy the recovery keys to Active Directory.

Script:
$keyID = Get-BitLockerVolume -MountPoint c: | select -ExpandProperty keyprotector |
where {$_.KeyProtectorType -eq 'RecoveryPassword'}
Backup-BitLockerKeyProtector -MountPoint c: -KeyProtectorId $keyID.KeyProtectorId

Are you ready to dive into the world of IT System Administration and Azure Cloud Engineering? Look no further! Udemy presents an exclusive course designed to elevate your skills and empower your career journey.

Introducing "Mastering IT System Administration & Azure Cloud Engineering" – your gateway to mastering the intricacies of IT infrastructure management and cloud computing with Azure.

What You'll Learn:
- Gain comprehensive knowledge of IT system administration principles.
- Dive deep into Azure cloud computing architecture and services.
- Learn to deploy, manage, and optimize Microsoft Server and Cloud infrastructure.
- Master essential IT skills to excel in your career.

Why Choose This Course:
- Expert-led instruction from seasoned IT professionals.
- Hands-on projects and real-world scenarios for practical learning.
- Flexible learning schedule – study at your own pace, anytime, anywhere.
- Lifetime access to course materials and updates.

🔗 Enroll Now and Unlock Your Potential!
Don't miss out on this opportunity to propel your career forward with Udemy. Enroll today and embark on your journey to becoming a master in IT System Administration & Azure Cloud Engineering!

Don't miss out on this opportunity to become a professional IT System Engineer with Udemy. Enroll today and unlock your potential!

Master Windows 11 Like a Professional!
Are you ready to unlock the full potential of Windows 11? Look no further! Dive into our comprehensive tutorial designed to equip you with everything you need to know to become a Windows 11 pro.
Introducing our YouTube tutorial: "Windows 11 Full Tutorial: Master Windows 11 Like a Professional". Whether you're new to Windows 11 or seeking to deepen your expertise, this tutorial has you covered.

Support My Effort with a Coffee!

If you've found my assistance helpful and would like to show your appreciation, you can support my efforts by buying me a coffee. Your generosity helps fuel my commitment to providing valuable assistance to users like you.

How to Support:
If you're inclined to buy me a coffee, you can do so through PayPal using the following link:

Your contribution is greatly appreciated and goes a long way in supporting the ongoing development of helpful resources and assistance. Thank you for your support!

Stay Connected with Me!

Let's stay connected on social media and continue our journey together. Here are the various platforms where you can find me:

Let's connect and continue to share valuable insights and resources. Looking forward to engaging with you across these platforms!

Ensure to click on the respective links to connect with me on each platform.

#Bitlocker #PowershellScript

[JonWoodward-kl]

super helpful video! thanks for posting

[christopherkurilla]

fantastic video, great walk through and explanation

[gabrielluizbh]

Very good video. You just forgot one thing.
At no point in the video did you demonstrate how you configured the GPO Require additional authentication at startup.

How did you do this setup?

[drewsanchez]

Great video Kelvin! Question, do ALL your DCs in a particular site have to have the Bitlocker Encryption installed in order backup the keys on existing devices?

[naingyeaung]

Hi Kelvin, I just want to make sure what can we make auto encrypted the bitlocker option without typing the password.
Thanks

[abdalrahman]

thank you for the video it was very informative.
i have a problem that i can't save more than one recovery password in AD, for example, i can save the recovery password of C drive but i couldn't backup recovery password for E or D drive??
any idea

[tristanjaybusto]

Thanks for the video sir, it is very helpful. Btw may I know what Windows Server version are you using? Because in our Windows 2016 server the BDE Template has no Fixed Data Drives, Operating System Drives and Removable Data Drives folder.

[Chucho]

If i enable this on laptops and people are not the domain will there be issues?

[davidalade]

Trust you are well and keeping safe and healthy.

A question please;what can be done in the case whereby an organization has 2 separate OU for computers? 
Namely;1. Default install 2 Created by the Admin
Please note, i'm not thinking of moving the computers. I just want to be able to achieve the same goal as backing up all Bitlocker keys to AD.

[ALKmusic]

Great video!
It works!

Do you have a video that explain how to automatically turn ON BitLocker and encrypt C drive as an enterprise deployment?
(I tried with PowerShell and batch file script. no luck)

[ahrunvathana]

Does this script applied to all drive in computer or just drive C ? Since I notice that - MountPoint c: ... Correct me if Im wrong.

$keyID = Get-BitLockerVolume -MountPoint c: | select -ExpandProperty keyprotector |
where {$_.KeyProtectorType -eq 'RecoveryPassword'}
Backup-BitLockerKeyProtector -MountPoint c: -KeyProtectorId $keyID.KeyProtectorId

[pratikkumarnet]

Thanks Kelvin.
Actually i work for a company and i have got a task where i need to install OS for more than 250 systems through WDS.
Is there any video related to this?

[Ben-kbvs]

Here is a question that i cannot find an answer to. We currently have both of your scenario's working already. The problem we are running into, is with computers that have multiple encrypted hard drives. if it is a new computer the fixed drive options in GPO should suffice, but how can you pull in keys of already encrypted laptops, that have both the C and D drives encrypted?

[phutiish]

Hi Sir.

I have followed all your steps. I am only getting prompt to save bitlocker recovery key in azure AD instead of onprem. What should I do to fix this

[deejagers]

I cannot write in that startup folder. No permission

[alideniz]

Hi Is this article valid in 2008 server?