manage-bde -protectors -get C: manage-bde -protectors -adbackup C: -id "YOUR-KEY-ID" Use code with caution. : powershell

For BitLocker recovery keys to be stored in Active Directory, certain prerequisites must be met:

You can manually force a client machine to upload its current key to Active Directory by running the following command on the local machine via an elevated Command Prompt: