$computer = Get-ADComputer -Identity "COMPUTER-NAME" Get-ADObject -Filter objectclass -eq "msFVE-RecoveryInformation" -SearchBase $computer.DistinguishedName -Properties msFVE-RecoveryPassword, msFVE-VolumeGuid

This guide covers the prerequisites, three different methods to retrieve the key (GUI, PowerShell, and Command Line), and how to interpret the data.

If a user is locked out of their BitLocker-encrypted drive and you manage computers in an Active Directory (AD) environment, the recovery key is likely stored in AD. Follow these methods to retrieve it.

Get-ADObject -Filter objectclass -eq "msFVE-RecoveryInformation" -SearchBase "CN=COMPUTER-NAME,OU=TargetOU,DC=domain,DC=com" -Properties msFVE-RecoveryPassword