Retrieving Bitlocker Recovery Keys from AD

Question

Fairly new to Powershell, I managed to get the following code to retrieve the Bitlocker key for computers in the domain, however, I have an issue with it:

Clear-Host
$TestOU = "OU=ABC,DC=XYZ,DC=com"
$PCs = Get-ADComputer -Filter * -SearchBase $TestOU
$Results = ForEach ($Computer in $PCs)
{
New-Object PSObject -Property @{
ComputerName = $Computer.Name
RecoveryPassword = Get-ADObject -Filter 'objectclass -eq "msFVE- 
RecoveryInformation"' -SearchBase $computer.DistinguishedName -Properties 
msFVE-RecoveryPassword,whencreated | sort whencreated -Descending | select 
msfve-recoverypassword
}
}
$Results

My output for each password begins with {a{msfve-recoverypassword= and I'm not sure how to remove this.

Try changing `select msfve-recoverypassword` to `select -ExpandProperty msfve-recoverypassword` — Jacob Colvin, May 18 '18 at 13:00

score 0 · Answer 1 · answered Mar 07 '19 at 11:20

The following code gives useful output for human consumption in the shell, but may also be used in a script:

$computer = Get-ADComputer $computerName
Get-ADObject -Filter 'objectClass -eq "msFVE-RecoveryInformation"' -SearchBase $computer.DistinguishedName -Properties whenCreated, msFVE-RecoveryPassword | `
  Sort whenCreated -Descending | Select whenCreated, msFVE-RecoveryPassword

Retrieving Bitlocker Recovery Keys from AD

1 Answers1