ind the bitlocker recovery key windows 10

#Ind the bitlocker recovery key windows 10 how to

Update Group Policy settings on the clients: gpupdate /force.

If you want to save BitLocker recovery keys for external media devices or other drives, configure a similar policy in these GPO sections: Fixed Data Drives and Removable Data Drives

In our case, automatic saving of a BitLocker key is enabled for the operating system drive.

If you check the option, BitLocker will not start drive encryption until the computer saves a new recovery key in AD (if you are a mobile user, you will have to wait for the next connection to the domain network) Note that it is recommended to check Do not enable BitLocker until recovery information is stored to AD DS for operating system drives.

Then go to Computer Configuration -> Policies -> Administrative Templates -> Windows Components -> BitLocker Drive Encryption -> Operating System Drives and enable the policy Choose how BitLocker-protected operating system drives can be recovered.

Enable the Store BitLocker recovery information in Active Directory Domain Services policy with the following settings: Require BitLocker backup to AD DS and Select BitLocker recovery information to store: Recovery passwords and key packages.

Go to Computer Configuration -> Administrative Templates -> Windows Components -> BitLocker Drive Encryption.

Open the Domain Group Policy Management console ( gpmc.msc), create a new GPO and link it to an OU with the computers you want to enable automatic BitLocker key saving in AD.

To automatically save (backup) BitLocker recovery keys to the Active Directory domain, you need to configure a special GPO.

#Ind the bitlocker recovery key windows 10 how to

How to Configure Group Policy to Store BitLocker Recovery Keys in AD? How to View and Manage BitLocker Recovery Keys in Active Directory?.How to Configure Group Policy to Store BitLocker Recovery Keys in AD?.