Tom’s AD BitLocker Password Audit can audit your BitLocker recovery passwords that are stored in Active Directory.

It accomplishes this by querying for all or selected computer objects and returning their recovery password and volume information in a grid-view format giving you a quick overview of the status of your current password recovery capabilities.

If you have configured your BitLocker Full Volume Encryption to back up recovery information for BitLocker-protected drives to Active Directory Domain Services (AD DS) the backed up BitLocker recovery information is stored in a child object of the computer object. Tom’s AD Bitlocker Password Audit enumerates all of the computer objects for your entire Active Directory or for a selected Organizational Unit and retrieves and displays the BitLocker recovery password in a spreadsheet-like format that can easily be filtered and sorted.