From Active Directory - Recover Bitlocker Key
That is nearly impossible by design. The recovery key is not stored locally in an accessible format. Always ensure backup to AD or Microsoft Entra ID (Azure AD) before deploying BitLocker at scale.
If the user provides the 32-character Recovery Password ID (e.g., 12345678-1234-1234-1234-123456789012 ): recover bitlocker key from active directory
Get-ADObject -Filter objectclass -eq 'msFVE-RecoveryInformation' -SearchBase "CN=ComputerName,OU=Workstations,DC=domain,DC=com" -Properties msFVE-RecoveryPassword, msFVE-RecoveryGuid That is nearly impossible by design