Solved

Bitlocker key lost

Posted on 2013-01-13
4
586 Views
Last Modified: 2016-11-23
Dear All,
one of our users has laptop dell latitude E6410 installed with Win 7 32 bit when he tried to open the laptop, the OS asked for the bitlocker key...i used to get this issue and  i retrieve it from the Active Directory.

When i tried to retrieve the key for this computer name i found nothing, i looked on the computer properties in the AD and nothing listed in the Bitlocker tab.

Now the laptop is locked and i dont know what can i do !!
The TPM is activated and nothing wrong.

Kindly advice as i need to retrieve that data.
0
Comment
Question by:mostabdo
  • 2
4 Comments
 
LVL 27

Expert Comment

by:MacroShadow
ID: 38771743
0
 

Author Comment

by:mostabdo
ID: 38771802
Is it a script to retrieve the key...i have a script already  which is working fine but the problem now is the key not saved in AD.
0
 
LVL 27

Assisted Solution

by:MacroShadow
MacroShadow earned 250 total points
ID: 38771808
Then unfortunately you are out of luck.
0
 
LVL 4

Accepted Solution

by:
Smighty earned 250 total points
ID: 38772008
If you set up the Group Policy Settings for Bitlocker properly, the key is stored in AD.
You have to have proper rights to view the BitLocker keys. Domain Admins should always be able to view the settings (we've granted this right to our Support Staff (via RBAC) as well). Please check the users machine entry in AD using a domain Admin account.

If the User has encrypted their device without the GPO in place, they might have stored it on an USB stick - its a text file with the recovery key in it.
0

Featured Post

Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you get continual lockouts after changing your Active Directory password, there are several possible reasons.  Two of the most common are using other devices to access your email and stored passwords in the credential manager of windows.
By default the complete memory dump option is disabled in windows . If we want to enable the complete memory dump for a diagnostic purpose, we have a solution for it. here we are using the registry method to enable this.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This Micro Tutorial will give you a basic overview of Windows DVD Burner through its features and interface. This will be demonstrated using Windows 7 operating system.

895 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now