{"id":3077,"date":"2019-04-09T10:10:27","date_gmt":"2019-04-09T09:10:27","guid":{"rendered":"https:\/\/www.lieben.nu\/liebensraum\/?p=3077"},"modified":"2019-04-09T10:10:27","modified_gmt":"2019-04-09T09:10:27","slug":"devices-that-lack-a-bitlocker-recovery-key-in-azuread","status":"publish","type":"post","link":"https:\/\/lieben.nu\/liebensraum\/2019\/04\/devices-that-lack-a-bitlocker-recovery-key-in-azuread\/","title":{"rendered":"Devices that lack a bitlocker recovery key in AzureAD"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">With Intune&#8217;s new <a rel=\"noreferrer noopener\" aria-label=\"Bitlocker Encryption Report (opens in a new tab)\" href=\"https:\/\/docs.microsoft.com\/bs-latn-ba\/intune\/encryption-monitor\" target=\"_blank\">Bitlocker Encryption Report<\/a> administrators have an effective way of seeing which of their devices have been encrypted.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><a href=\"https:\/\/www.lieben.nu\/liebensraum\/wp-content\/uploads\/2019\/04\/2019-04-09-11_02_56-Encryption-report-Preview-Microsoft-Azure.png\"><img loading=\"lazy\" decoding=\"async\" width=\"1808\" height=\"523\" src=\"https:\/\/www.lieben.nu\/liebensraum\/wp-content\/uploads\/2019\/04\/2019-04-09-11_02_56-Encryption-report-Preview-Microsoft-Azure.png\" alt=\"\" class=\"wp-image-3078\" srcset=\"https:\/\/lieben.nu\/liebensraum\/wp-content\/uploads\/2019\/04\/2019-04-09-11_02_56-Encryption-report-Preview-Microsoft-Azure.png 1808w, https:\/\/lieben.nu\/liebensraum\/wp-content\/uploads\/2019\/04\/2019-04-09-11_02_56-Encryption-report-Preview-Microsoft-Azure-300x87.png 300w, https:\/\/lieben.nu\/liebensraum\/wp-content\/uploads\/2019\/04\/2019-04-09-11_02_56-Encryption-report-Preview-Microsoft-Azure-1024x296.png 1024w, https:\/\/lieben.nu\/liebensraum\/wp-content\/uploads\/2019\/04\/2019-04-09-11_02_56-Encryption-report-Preview-Microsoft-Azure-768x222.png 768w, https:\/\/lieben.nu\/liebensraum\/wp-content\/uploads\/2019\/04\/2019-04-09-11_02_56-Encryption-report-Preview-Microsoft-Azure-1536x444.png 1536w\" sizes=\"auto, (max-width: 1808px) 100vw, 1808px\" \/><\/a><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">But if we want to know if we can actually <strong>recover<\/strong> the bitlocker key of a device, we need to know if it was ever uploaded to AzureAD.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Network or local device issues can sometimes prevent the recovery key from reaching AzureAD, resulting in <strong>lost data<\/strong> if the device&#8217;s disk needs to be recovered for any reason. To hunt down devices that have not escrowed their recovery key to AzureAD, you can use my report function (in PowerShell as always):<\/p>\n\n\n\n<figure class=\"wp-block-image\"><a href=\"https:\/\/www.lieben.nu\/liebensraum\/wp-content\/uploads\/2019\/04\/2019-04-09-11_06_49-BitLockerReport.xlsx-Excel.png\"><img loading=\"lazy\" decoding=\"async\" width=\"1895\" height=\"196\" src=\"https:\/\/www.lieben.nu\/liebensraum\/wp-content\/uploads\/2019\/04\/2019-04-09-11_06_49-BitLockerReport.xlsx-Excel.png\" alt=\"\" class=\"wp-image-3079\" srcset=\"https:\/\/lieben.nu\/liebensraum\/wp-content\/uploads\/2019\/04\/2019-04-09-11_06_49-BitLockerReport.xlsx-Excel.png 1895w, https:\/\/lieben.nu\/liebensraum\/wp-content\/uploads\/2019\/04\/2019-04-09-11_06_49-BitLockerReport.xlsx-Excel-300x31.png 300w, https:\/\/lieben.nu\/liebensraum\/wp-content\/uploads\/2019\/04\/2019-04-09-11_06_49-BitLockerReport.xlsx-Excel-1024x106.png 1024w, https:\/\/lieben.nu\/liebensraum\/wp-content\/uploads\/2019\/04\/2019-04-09-11_06_49-BitLockerReport.xlsx-Excel-768x79.png 768w, https:\/\/lieben.nu\/liebensraum\/wp-content\/uploads\/2019\/04\/2019-04-09-11_06_49-BitLockerReport.xlsx-Excel-1536x159.png 1536w\" sizes=\"auto, (max-width: 1895px) 100vw, 1895px\" \/><\/a><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/gitlab.com\/Lieben\/assortedFunctions\/blob\/master\/get-bitlockerEscrowStatusForAzureADDevices.ps1\" target=\"_blank\" rel=\"noreferrer noopener\" aria-label=\"GitLab source download link (opens in a new tab)\">GitLab source download link<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>With Intune&#8217;s new Bitlocker Encryption Report administrators have an effective way of seeing which of their devices have been encrypted. But if we want to know if we can actually recover the bitlocker key of a device, we need to know if it was ever uploaded to AzureAD. Network or local device issues can sometimes &hellip; <a href=\"https:\/\/lieben.nu\/liebensraum\/2019\/04\/devices-that-lack-a-bitlocker-recovery-key-in-azuread\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">Devices that lack a bitlocker recovery key in AzureAD<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_crdt_document":"","footnotes":""},"categories":[4,7,12,22,39,43],"tags":[],"class_list":["post-3077","post","type-post","status-publish","format-standard","hentry","category-automation","category-azuread","category-ems","category-intune","category-powershell","category-security"],"_links":{"self":[{"href":"https:\/\/lieben.nu\/liebensraum\/wp-json\/wp\/v2\/posts\/3077","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lieben.nu\/liebensraum\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lieben.nu\/liebensraum\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lieben.nu\/liebensraum\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/lieben.nu\/liebensraum\/wp-json\/wp\/v2\/comments?post=3077"}],"version-history":[{"count":0,"href":"https:\/\/lieben.nu\/liebensraum\/wp-json\/wp\/v2\/posts\/3077\/revisions"}],"wp:attachment":[{"href":"https:\/\/lieben.nu\/liebensraum\/wp-json\/wp\/v2\/media?parent=3077"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lieben.nu\/liebensraum\/wp-json\/wp\/v2\/categories?post=3077"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lieben.nu\/liebensraum\/wp-json\/wp\/v2\/tags?post=3077"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}