Is there a way to sync bitlocker recovery key from OnPrem AD to AAD via AAD Connect server

[Ankur_Bagga]

Is there a way to sync bitlocker recovery key from OnPrem AD to AAD via AAD Connect server

[#2 · Accepted solution]

Not possible using ADConnect.

If you have Hybrid Join PCs, you can use Intune Config Profiles or Security Baseline to save the recovery key in AAD.

Hope it helps!
Moe

[#3]

@Moe_Kinani- Thanks for the kind advise and prompt response. It really helped.

[#4]

Hi Moe,
Is there any guide to create that specific config profile?

[#5]

Hi Junshah,

If your hybrid devices are already encrypted use the url below-

https://campbell.scot/store-bitlocker-recovery-keys-in-azure-ad-for-devices-already-encrypted/

If not encrypted, use this setting to encrypt and back the keys in Azure AD
https://learn.microsoft.com/en-us/answers/questions/774898/on-prem-joined-domain-pcs-does-not-have-o...

[#6]

Thanks Moe, It worked perfectly.

[#7]

Glad to hear it!

[#8]

Can I assume you must have active Intune device licenses (or a user license for the person managing it) for every device you intend to do this on?

[#9]

You need devices managed by Intune and can receive config from Intune, whether user or device licensed.

Moe

[#10]

@Ankur_Bagga 

This solution did it for me: https://blog.mindcore.dk/2023/11/how-to-migrate-bitlocker-keys-from-all-fixed-drives-to-microsoft-en...

Fixed all my bitlocker AAD Intune issues.