To view the recovery passwords in AD, you must be a domain administrator or you must have been delegated permissions by a domain administrator. Figure 1: The Find BitLocker recovery password dialog box Windows displays the first eight characters of the recovery password after the user or help desk operator reboots a client machine in recovery mode. To do so, in the Find BitLocker recovery password dialog box, which Figure 1 shows, type the first eight characters of the recovery password in the Password ID box, then click Search.
When the extensions are installed, you can use the new BitLocker Recovery tab in an AD computer object's Properties dialog box to view the BitLocker recovery passwords that are linked to that computer's BitLocker-protected volumes.Īdditionally, you can right-click the domain container in Active Directory Users and Computers and search for a specific BitLocker recovery password across the domain. The tool provides extensions to the Microsoft Management Console (MMC) Active Directory Users and Computers snap-in and the Active Directory Administrative Center.
It's an optional feature that's included with the Remote Server Administration Toolkit (RSAT), which you can install by using the Add Roles and Features option in the Windows Server 2008 R2 and Windows Server 2012 Server Manager or from the Programs and Features option in Control Panel. Q: How can I easily retrieve BitLocker recovery passwords from Active Directory?Ī: The Windows BitLocker Drive Encryption Recovery Password Viewer provides an easy solution for retrieving and viewing BitLocker recovery passwords that were backed up to Active Directory (AD).
0 kommentar(er)
