Bitlocker Key — Active Directory
Get-ADObject -Filter objectclass -eq 'msFVE-RecoveryInformation' -SearchBase "CN=ComputerName,OU=Computers,DC=domain,DC=com" -Properties msFVE-RecoveryPassword
# Find the computer associated with a specific Key ID Get-ADObject -Filter objectclass -eq "msFVE-RecoveryInformation" -and Name -like "*KEY-ID-GOES-HERE*" -Properties msFVE-RecoveryPassword, DistinguishedName bitlocker key active directory
Access to recovery keys should be audited and restricted. To delegate access: bitlocker key active directory