3.2K
if you are not using MBAM and don’t have access to your Active Directory and want to recover your BitLocker key for whatever reason you can quickly do it as follows:-
Open an Administrative Command Prompt and type the following:
manage-bde -protectors c: -get
replace the drive letter c: with whatever drive is encrypted.
you’ll see output something like this
BitLocker Drive Encryption: Configuration Tool version 6.2.9200
Copyright (C) 2012 Microsoft Corporation. All rights reserved.
Volume C: [OSDisk]
All Key Protectors
TPM: ID: {37CE71B7-8FE4-4CA9-9637-42516F599C02}
Numerical Password: ID: {31514A2F-147C-478C-B6A2-618CD6F66653}
Password:
249238-002442-716694-646503-010879-234894-155485-185372
To save your recovery key to a network share use the following script
manage-bde -protectors -add c: -recoverykey c:
And below is the script… modify to suit your network share names…
net use Driverletter Networkshare /user:domainusername password md driveletterbitlockerkeys%computername% attrib -h -s c:*.bek move c:*.bek driveletterbitlockerkeys%computername%
