Enable Bitlocker Recovery Password Viewer In | Active Directory ((exclusive))
He found the setting: Choose how BitLocker-protected operating system drives can be recovered.
He pulled up an old KB article from 2015, the kind with yellow syntax highlighting and no images. The fix was brutal but clean: extend the schema using the BitLockerADBackup.wsf script from the Windows Server installation media. But he didn’t have the media. He had a half-dead laptop, a Red Bull, and a VP screaming into voicemail. a Red Bull
And there it was: msFVE-RecoveryPassword . a Red Bull