The domain contains DC's that are all 2008sp2, I have installed the RSAT bitlocker tools via server manager but the tab is still missing, also tried to run regsrv32 BdeAducExt.dll but it says the specified module cannot be found. Tried to download and install the: BitLocker Recovery Password Viewer from: http://www.microsoft.com/downloads/details.aspx?familyid=2786FDE9-5986-4ED6-8FE4-F88E2492A5BD&displaylang=en When I try to install this it says the update does not apply to this system, I have tried this on an x86 DC and an x64 DC and it is the same on both. Any help would be greatCarl Smith MCITP-EA

I have setup a test domain with 2008R2 and I can access the bitlocker features in ADUC, but in the production 2008sp2 domain I still cannot see the bitlocker features, has no on else had this issue?!Carl Smith MCITP-EA

I have setup a test domain with 2008R2 and I can access the bitlocker features in ADUC, but in the production 2008sp2 domain I still cannot see the bitlocker features, has no on else had this issue?! Carl Smith MCITP-EA That is because Windows Server 2008 SP2 and Windows Server 2008 R2 are different operating systems. Windows Server 2008 SP2 is a Windows Vista platform server where Server 2008 R2 is a Windows 7 platform Server. They should not be confused as the same server, even though the OS title is the same. You have to manually add this tool to SP2 version, http://support.microsoft.com/kb/928202 - The downloads can be found at this KB article 928202. As it states in that knowledgebase, you must have enterprise admin privileges to run that command. Best Regards, Steve Kline - MCITP:SA This posting is "as is" without warranties and confers no rights.

Thanks for the reply Steve, I am aware that Server 2008 and 2008R2 have kernels that are different and they are based on Windows 6.0 and Windows 6.1 code respectively. My issue is that in the KB the password viewer will not install on any 2008sp2 DC it states the "update does not apply to your system" I assume this is simply an issue with the RSAT on the DC's as the entry information to support bitlocker is in the configuration naming context within the AD. As a temp workaround a Windows 7 machine with the RSAT shows the tab in ADUC but it does not explain why the ADUC on Server2008 does not seem to have support for this. Carl Smith MCITP-EA

Hi, Please verify that the Remote Server Administration Tools\Feature Administration Tools\Bitlokcer Drive Encryption Administration Utilities feature has been installed. THe following thread could be helpful for you to troubleshoot the issue: http://social.technet.microsoft.com/Forums/en/winserversecurity/thread/9ef55790-f919-4f7b-9c2f-174b3f170a5aThis posting is provided "AS IS" with no warranties, and confers no rights. Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

I have the same issue but it is a 2003 spk1 Domain. I ran the schema update and added the ACe for TPM i can create all the GPO's for bitlocker and everything appears to be working but the BitLocker recovery Tab is missing in computers and users. I have RSAT installed on my win 7 box and our test 2008 R2 domain works but our primary 2003 AD the Tab is still not there. Any ideas??