active directory find bitlocker recovery password

De-selecting 'General', then clicking 'Back', then 'Next' should clear the unnecessary boxes. Only 'Property-specific' and 'Write msTPM-OwnerInformation' are to be selected. Select 'Property-specific', select 'Write msTPM-OwnerInformation', and click 'Next'. Select 'Only the following objects in the folder:', select 'Computer objects', and then click 'Next'. Select 'Create a custom take to delegate', then click 'Next'. In ADUC (dsa.msc), right click on the OU that contains your computer objects and select 'Delegate Control.'Ĭlick 'Add.', and type 'SELF', click 'Check Names', then click 'OK'. Make sure to run 'dsa.msc' as an OU account that has access to write information. Retrieve BitLocker recovery information from AD DSĭelegate permissions for backing up TPM password information with Active Directory Users and Computers (ADUC) Retrieve TPM owner information from AD DS List the ACE's configured on TPM and BitLocker schema objects Some helpful scripts, but not necessarily needed:Īdd an ACE to write TPM recovery information to AD DS

This article was used as a template for this document:īacking up BitLocker and TPM Recovery Information to AD DS

UW-Madison's AD (ad.) BitLocker Documentation for OUs

Active directory find bitlocker recovery password