Windows 10: Bitlocker Not Shown on my MS account or Azure

Hi there, I have been locked out of my hard drive by Bitlocker. 1st I did not activate this, 2nd MS in my account shows its activated, ie with out my authorisation. I have spent 5days researching this common issue which has my business 10s of 1000s of $. Given that MS generated this during its "own" updates, I would like to have MY code for Bitlcoker to continue to run my business please. Im not looking to blame, I just need resolution fast.

:)

 

Bitlocker and Azure Active Directory

When setting up Bitlocker on an Azure AD connected device, you have the following options: https://i.imgur.com/MHbPBu6.png

A question about the exact wording of "Save to your cloud domain account". IMO that's not totally clear where it stores it. It infers, to me, that it would save it against my user domain account. However, I suspect it's saved against the device in Azure
AD as that's the only place I can see this. Is this correct?

At the moment, the laptops are set-up by IT using their own account and a key step is to save the Bitlocker key. However, when a user first logs on, we also save it there. I suspect this later step is not needed.

Supplemental question - on the page linked below (which is the link from the Bitlocker screen), it says to access your Microsoft Azure account to get the Bitlocker key:

https://support.microsoft.com/en-gb/help/4026181/windows-10-find-my-bitlocker-recovery-key

Can I also confirm that this misleading for normal users as the profile page that this takes you to has no information about Bitlocker:

https://i.imgur.com/MeWkcdN.png

And that the only way a user can retrieve their Bitlocker recovery key is to ask an admin with access to the Azure portal to look it up based upon their computer name?

 

Bitlocker and Azure Active Directory

Hi Rob-Nicholson-Malt

My name is Sarah Kong and I am an independent adviser that is here to try and help you with your issue.

On-premise domain accounts and Azure AD accounts are 2 separate accounts that you can login with.

You can join your PC to both Onprem AD and Azure AD.

What makes the difference is which one you login in with.

For my example let's say my work\onprem account is *** Email address is removed for privacy *** and my Azure AD account is *** Email address is removed for privacy ***.

If i login with the *** Email address is removed for privacy *** then i am authenticating to my onprem servers.

If I login with the *** Email address is removed for privacy *** then i am authenticating to Azure AD.

So as for your questions when you enable bitlocker which account are you logged in with? onprem or azure AD?

And if onprem i hope you have a GPO on your DCs that says recovery key stored in Active Directory. If that is the case then you don't have to worry about saving it to the cloud and yes IT staff would retrieve the key from the computer object for the user.

If they are logging in with their Azure AD account and enabling bitlocker then same thing IT will get it from the Devices in Azure AD.

 

USB Bitlocker Key

Hello
Arambu,

Here are other places to look for your BitLocker key:

• In your Microsoft account. To get your recovery key, go to
  BitLocker Recovery Keys.
• In your Azure Active Directory account. For work PCs where you sign in with an Azure Active Directory account, to get your recovery key, see the device info for your
  
  Microsoft Azure account.

If you have additional questions, or if the issue persists after looking at the steps above, please let me know by replying to this thread. This way, I'll get notified and respond back to you as soon as I can.