You must have a TPM module in order for this to work. Check your BIOS
The following command will enable bitlocker with a recovery password to the logs location:
manage-bde –on C: -recoverypassword >> "\\networklocation\logs$\%computername%-bitlocker.txt"
Move this file to somewhere safe after
You can then see the status with this command:
manage-bde -status
To retrieve the keys again in case it didn’t push it to the test file do this command:
manage-bde -protectors -get C:
I noticed after the above command I got the following response which does not have the key:
TPM:
ID: {XXXXXX-XXX-xxxx-xxxx-xxxxxxxxxx}
PCR Alidation Profile:
0, 2, 4, 11
So what I did is I ran this command and it updated to the AD correctly
Add-BitLockerKeyProtector -MountPoint -C: -RecoveryPasswordProtector
I then ran the get command again and it showed the proper key this time in the output.
