Here’s a solid, production-ready PowerShell approach to retrieve BitLocker recovery keys from (most common for domain-joined machines). Get BitLocker Recovery Key from AD (Domain-Joined) # Requires ActiveDirectory module (RSAT or domain controller) Import-Module ActiveDirectory Get key for a specific computer (by name) $ComputerName = "PC-JOHN-DOE" Get-ADObject -Filter "Name -eq '$ComputerName'" -Properties msFVE-RecoveryPassword | Select-Object @N="Computer";E=$ .Name, @N="RecoveryPassword";E=$ .'msFVE-RecoveryPassword'