The ConfigMgr Console Extensions from provides an easy solution for retrieving Windows BitLocker Drive Encryption recovery passwords from ConfigMgr-Console. The script needs the Active Directory Module for Windows PowerShell.

To use this script as a right-click action, make sure that the folder <AdminConsoleInstallDir>\XmlStorage\Extensions\Actions\ed9dee86-eadd-4ac8-82a1-7234a4646e62 exist and add the XML file to this folder. Please also copy the .ps1 script (GetBitLockerRecoveryPassword.ps1) to c:\scripts\GetBitLockerRecoveryPassword.ps1.


  1. Active Directory Module for Windows PowerShell (and Permissions).