Windows 10: In which Azure AD account is the Bitlocker recovery key saved?

I signed in to my Windows 11 PC using a personal Microsoft account. However, my Outlook and Office are using a Microsoft 365 organization account.I was trying to turn on Bitlocker for a particular drive. It says the following about the recovery key:In which Azure AD account is it saved? What Azure AD account is it referring to?

:)

 

BitLocker Recovery Key: How To Backup to Microsoft Account Instead of Azure AD?

Hi,

I am trying to backup my BitLocker Recovery Keys to my Microsoft Account, but the option is not there, it has been replaced by the option to backup to Azure AD account.

I do not have a personal subscription to Azure AD, although I can connect to my workplace's Azure account. However, the Recovery Keys do not appear for my devices in their account either.

Ideally I would like the World to forget that I ever accessed Azure & return to normal life!

Any suggestions, please?

 

BitLocker Recovery Key Stored in Azure AD not Microsoft Account

I have a personal Microsoft account, which I use to log into two machines, a desktop and a laptop. I own both machines.

I also have an Office 365 account, and I am the admin of this for our company. I have two OneDrives, one personal, and one connected to Sharepoint on Office365. I also use Outlook, which is connected to both Outlook.com for my personal email, and Office365
for work email.

I log onto both machines using my Microsoft Account. Neither machine is connected to a domain.

When I try to back up my Bitlocker key from the Surface Book, I am not given the option to save it to my Microsoft account. I am given the option to save it to my "cloud domain account." When I do this, the key is saved in Azure, under Users.

I don't really want this. It's a personal laptop, I own it, and I'd like to be able to access the Bitlocker key even if I am no longer at my current organisation. I'd like to save the key to my Microsoft account.

Why is this happening, and how can I remove whatever hooks Azure AD has got in my laptop, while retaining access to the Office365 OneDrive / Sharepoint and Office365 email?

Or, how can I force the key to be saved in my personal Microsoft Account, and not in the organisations Azure AD account?

 

Bitlocker and Azure Active Directory

When setting up Bitlocker on an Azure AD connected device, you have the following options: imgur.com

A question about the exact wording of "Save to your cloud domain account". IMO that's not totally clear where it stores it. It infers, to me, that it would save it against my user domain account. However, I suspect it's saved against the device in Azure
AD as that's the only place I can see this. Is this correct?

At the moment, the laptops are set-up by IT using their own account and a key step is to save the Bitlocker key. However, when a user first logs on, we also save it there. I suspect this later step is not needed.

Supplemental question - on the page linked below (which is the link from the Bitlocker screen), it says to access your Microsoft Azure account to get the Bitlocker key:

Find your BitLocker recovery key - Microsoft Support

Can I also confirm that this misleading for normal users as the profile page that this takes you to has no information about Bitlocker:

imgur.com

And that the only way a user can retrieve their Bitlocker recovery key is to ask an admin with access to the Azure portal to look it up based upon their computer name?