An employee reports that she must perform a BitLocker recovery on her laptop. The employee does not have her BitLocker recovery key but does have a
Windows 10 desktop computer.
What should you instruct the employee to do from the desktop computer?
An employee reports that she must perform a BitLocker recovery on her laptop. The employee does not have her BitLocker recovery key but does have a
Windows 10 desktop computer.
What should you instruct the employee to do from the desktop computer?
The correct action is for the employee to use the BitLocker Recovery Password Viewer to view the computer object of the laptop. This tool allows administrators to retrieve BitLocker recovery passwords that are backed up to Active Directory (AD). Given that the laptop's encryption would likely have its recovery key stored in AD, accessing it through the BitLocker Recovery Password Viewer would be the appropriate step to recover the key and enable the user to perform the BitLocker recovery on her laptop.
Once the BitLocker recovery key is backed up to Azure AD, users can find their own keys in the Profile section after signing into https://account.activedirectory.windowsazure.com/profile/. Administrators can log in to https://account.activedirectory.windowsazure.com/n/#/devices, select the appropriate device, and click View Details to get the BitLocker recovery key.