BitLocker Recovery Password Viewer for Active Directory Users and Computers tool

The Bitlocker Active Directory Recovery Password Viewer helps to locate BitLocker Drive Encryption recovery passwords for Windows Vista- or Windows Server 2008- based computers in Active Directory Domain Services (AD DS).
  • Note:There are multiple files available for this download.Once you click on the "Download" button, you will be prompted to select the files you need.


    File Name:



    Date Published:


    File Size:

    206 KB

    211 KB

    KB Articles: KB928202

      The BitLocker Active Directory Recovery Password Viewer lets you locate and view BitLocker recovery passwords that are stored in AD DS. You can use this tool to help recover data that is stored on a volume that has been encrypted by using BitLocker. The BitLocker Active Directory Recovery Password Viewer is an extension for the Active Directory Users and Computers MMC snap-in. After you install this tool, you can examine a computer object's Properties dialog box to view the corresponding BitLocker recovery passwords. Additionally, you can right-click a domain container and then search for a BitLocker recovery password across all the domains in the Active Directory forest.
      Note To view recovery passwords, you must be a domain administrator, or you must have been delegated permissions by a domain administrator.
  • Supported Operating System

    Windows Server 2008, Windows Vista Enterprise, Windows Vista Enterprise 64-bit edition, Windows Vista Service Pack 1, Windows Vista Ultimate, Windows Vista Ultimate 64-bit edition

      Note: BitLocker does not need to be installed on the computer for you to use the BitLocker Recovery Password Viewer Tool, but the system must be running.
    • To start the download, click the Download button at the top of this page and do one of the following:
      • Click Open to start the installation immediately.
      • Click Save to copy the download to your computer for installation at a later time.

      Note: Please run “regsvr32.exe BdeAducExt.dll” as an Enterprise Administrator from your Windows system folder the first time this tool is run on the domain. Subsequent use of the tool on the domain will not require regsvr32.exe to be run.