Hi, Is is possible to store Bitlocker recovery keys in both AD and in MBAM simultaneously? Can the related GPOs be set to store keys in AD at the same time? Would the agnet end up backing up the keys in MBAM as well if that were the case? Thanks. -J.

Where in MBAM do you want the key to be stored? When using MBAM the key gets stored in AD when using that option. You can then use the MBAM Console to get the recovery key for the user when required but all that does it grab it from AD. You'll notice in AD from the server you have MBAM setup on, browse to the computer which you deployed the Encryption prompt to. You'll see a BitLocker Recovery tab in the properties for that machine.PLEASE MARK ANY ANSWERS TO HELP OTHERS Blog: rorymon.com Twitter: @Rorymon

Where in MBAM do you want the key to be stored? When using MBAM the key gets stored in AD when using that option. You can then use the MBAM Console to get the recovery key for the user when required but all that does it grab it from AD. You'll notice in AD from the server you have MBAM setup on, browse to the computer which you deployed the Encryption prompt to. You'll see a BitLocker Recovery tab in the properties for that machine.PLEASE MARK ANY ANSWERS TO HELP OTHERS Blog: rorymon.com Twitter: @Rorymon