Laptop recovery key not showing in Active Directory
4.5
IT admins cannot find the BitLocker recovery key for a domain-joined laptop.
Symptoms
- Key missing in ADUC
- No BitLocker tab
- Search returns nothing
Possible Causes
- GPO not configured
- Permissions
- Sync failure
Step-by-Step Fix
1
Check GPO Settings
Ensure "Store BitLocker recovery information in Active Directory Domain Services" is enabled.
2
Install BitLocker Recovery Tool
Ensure the "BitLocker Recovery Password Viewer" feature is installed on the DC.
3
Force Sync
Use "manage-bde -protectors -adbackup C:" on the client.
When to See a Technician
The client must have a line of sight to the Domain Controller when encryption is enabled for the key to upload.
Rate this Fix
0 / 5(0 ratings)
Comments (0)
No comments yet. Be the first to share!