Windows 10: Bitlocker and Azure Active Directory

When setting up Bitlocker on an Azure AD connected device, you have the following options: https://i.imgur.com/MHbPBu6.png


A question about the exact wording of "Save to your cloud domain account". IMO that's not totally clear where it stores it. It infers, to me, that it would save it against my user domain account. However, I suspect it's saved against the device in Azure AD as that's the only place I can see this. Is this correct?


At the moment, the laptops are set-up by IT using their own account and a key step is to save the Bitlocker key. However, when a user first logs on, we also save it there. I suspect this later step is not needed.


Supplemental question - on the page linked below (which is the link from the Bitlocker screen), it says to access your Microsoft Azure account to get the Bitlocker key:


https://support.microsoft.com/en-gb/help/4026181/windows-10-find-my-bitlocker-recovery-key


Can I also confirm that this misleading for normal users as the profile page that this takes you to has no information about Bitlocker:


https://i.imgur.com/MeWkcdN.png


And that the only way a user can retrieve their Bitlocker recovery key is to ask an admin with access to the Azure portal to look it up based upon their computer name?

:)

 

Windows 10 and Azure Active Directory: Embracing the Cloud

Source: http://blogs.windows.com/business/20...ing-the-cloud/

 

USB Bitlocker Key

Hello
Arambu,

Here are other places to look for your BitLocker key:

• In your Microsoft account. To get your recovery key, go to
  BitLocker Recovery Keys.
• In your Azure Active Directory account. For work PCs where you sign in with an Azure Active Directory account, to get your recovery key, see the device info for your
  
  Microsoft Azure account.

If you have additional questions, or if the issue persists after looking at the steps above, please let me know by replying to this thread. This way, I'll get notified and respond back to you as soon as I can.

 

Bitlocker problem

Hi Mukeshub,

If you got locked out by BitLocker, here's where you can find your BitLocker recovery key:

• On a printout you saved. Look in places you keep important papers.
• Saved on a USB flash drive. Plug the USB flash drive in to your locked PC and follow the instructions. If you saved the key as a text file on the flash drive, use a different computer to read the text file.
• In your Microsoft account. To get your recovery key, go to
  BitLocker Recovery Keys
• In your Azure Active Directory account. For work PCs where you sign in with an Azure Active Directory account, to get your recovery key, see the device info for your
  Microsoft Azure account.

Or ask someone for help:

• Ask someone with administrator privileges on the same PC to unlock it with their key.
• If your PC is connected to a domain (usually a work or school computer), ask a system administrator for your recovery key.

Let us know how it goes.