Hello,
We have created a SCCM-related Task Sequence to encrypt laptops.
As long as machine is constantly connected to the network, the GPO that dictates to save the Recovery Key to AD is properly working.
We see issues when machine disconnected from the network, (no VPN to the domain environment) is executing encryption.
Encryption properly works and disk gets encrypted, however even after manually executing the following command:
manage-bde -protectors -adbackup c: -id {xxx}
to push the key to AD (after establishing VPN connectivity to the domain) it is NOT getting populated in the corresponding "BitLocker Recovery" tab.
The result of the command is the usual:
Recovery information was successfully backed up to Active Directory.
Is there any way to troubleshoot this issue?
Thank you.
