I am setting up Bitlocker on our Windows machines. I am trying to get the recovery keys stored in AD. I have the following policies in place. Turn on BitLocker backup to Active Directory. Turn on TPM backup to Active Directory. and I've ran Add-TPMSelfWriteACE.vbs to set the permissions All settings are enabled in group policy both in domain and local policies. I encrypted a Windows 7 PC and it appears that it was successful in backing the key up to AD as I can view the passord information using the Get-BitlockerRecoveryinfo.vbs script for any computer. Now I'm trying to view that key. From what I've read, you can use the Bitlocker Password Viewer from RSAT and a tab should appear on the computer properties in ADUC. I've tried this, but I don't have the tab. Am I missing something? I've gone through every step at least 3 times.

Hi, for AD related Bitlocker issue, I suggest you post to Windows Server forum via the following link: http://social.technet.microsoft.com/Forums/en-US/winserversecurity/threads Thank you.Sean Zhu - MSFT

did you run regsvr32.exe BdeAducExt.dll before running the Bitlocker Password Viewer?