Backup Bitlocker Keys to Active Directory - Revision history

Corey: Added introduction and changed first steps on running cmd as admin

2017-12-01T18:27:23Z

Added introduction and changed first steps on running cmd as admin

← Older revision		Revision as of 18:27, 1 December 2017
Line 1:		Line 1:
	*Press Windows key ~~+ X~~		The following instructions can be used to force a supported Microsoft Windows operating system to backup its encryption key to Active Directory for safe keeping. Please note that if you have setup bitlocker GPOs with existing encrypted devices already in production, you will need to run this command on those existing endpoints.
	*~~Click "~~Command Prompt '''~~(admin)~~'''"		*Press Windows key to show the start menu & type "cmd" to bring up a search for Windows Command Prompt
			*Right click Windows Command Prompt and select '''"Run as Administrator"'''
	*Enter the following command:		*Enter the following command:
	::<code>manage-bde -protectors -get c:</code><ref name="jack" />		::<code>manage-bde -protectors -get c:</code><ref name="jack" />

Corey: Added Proper Citation

2017-12-01T18:13:33Z

Added Proper Citation

← Older revision		Revision as of 18:13, 1 December 2017
Line 1:		Line 1:
	#Press Windows key + X		*Press Windows key + X
	#Click "Command Prompt '''(admin)'''"		*Click "Command Prompt '''(admin)'''"
	#Enter the following command:		*Enter the following command:
	::<code>manage-bde -protectors -get c:</code>		::<code>manage-bde -protectors -get c:</code><ref name="jack" />
	#From here you should copy the "Numerical Password ID with the brackets"		*From here you should copy the "Numerical Password ID with the brackets"
	::[[File:Bitlocker AD Protectors.PNG\|none\|frame\|400px\|Example of Step 3. Keys have been blurred on purpose]]		::[[File:Bitlocker AD Protectors.PNG\|none\|frame\|400px\|Example of Step 3. Keys have been blurred on purpose]]
	#Enter the following command with numerical ID from above inserted		*Enter the following command with numerical ID from above inserted
	::<code>manage-bde -protectors -adbackup c: -id {'''yourNumbericalPassword'''}		::<code>manage-bde -protectors -adbackup c: -id {'''yourNumbericalPassword'''}</code><ref name="jack" />
	#You should see that your key was successfully backed up to Active Directory		*You should see that your key was successfully backed up to Active Directory
	::[[File:Bitlocker AD Backup Success.PNG\|none\|frame\|400px\|Example of Step 6. Key Number has been blurred on purpose]]		::[[File:Bitlocker AD Backup Success.PNG\|none\|frame\|400px\|Example of Step 6. Key Number has been blurred on purpose]]

			==References==
			<references>
			<ref name="jack">Jack Stromberg, [http://jackstromberg.com jackstromberg.com], February 4, 2015</ref>
			</references>
			[[Category:Microsoft]]

Corey: Added main content and image examples

2017-12-01T18:00:36Z

Added main content and image examples

New page

#Press Windows key + X
#Click "Command Prompt '''(admin)'''"
#Enter the following command:
::<code>manage-bde -protectors -get c:</code>
#From here you should copy the "Numerical Password ID with the brackets"
::[[File:Bitlocker AD Protectors.PNG|none|frame|400px|Example of Step 3. Keys have been blurred on purpose]]
#Enter the following command with numerical ID from above inserted
::<code>manage-bde -protectors -adbackup c: -id {'''yourNumbericalPassword'''}
#You should see that your key was successfully backed up to Active Directory
::[[File:Bitlocker AD Backup Success.PNG|none|frame|400px|Example of Step 6. Key Number has been blurred on purpose]]