[1703, cu] Bitlocker no TPM not backing up to AD

[nicholab]

I don't seem to be able to get my laptops to backup Bitlocker recovery keys to AD I am running AD 2012 and don't have TPM chips in the machines.

 

I have looked in AD and the recovery key is not showing next to the machine.

 

What am I dong wrong?

[newpersn]

You checked GPO for bitlocker?

 

There be a setting within bitlocker about backing the recovering key to AD.

[nicholab]

You checked GPO for bitlocker?

 

There be a setting within bitlocker about backing the recovering key to AD.

 

I think that is defined already but it seems to be having no effect.

[RLR]

Edit. Ignore what I said.

[sted]

have you tried manually adding the codes?

 

on an encrypted pc open up an admin powershell session

 

manage-bde -protectors -get c:

 

assuming that returns data now dumps the number to a text file where its easier to copy and paste

manage-bde -protectors -get c: >bl.txt

now copy the numerical password id and drop it where ive written long code below

manage-bde -protectors -adbackup c: -id ‘{long code}’

note you need the ' round the code or it fails

[nicholab]

I have just tried this and the system says "Recover information was successfully backup up to Active Directory."

[nicholab]

I got and error code of 0x80005000 after trying for the second time and I found that this was caused by an OU name containing "/". I found this from by looking through some online error codes https://www.techidiots.net/notes/windows-7/bitlocker-0x80005000.