Quantcast
Channel: Directory Services forum
Viewing all articles
Browse latest Browse all 31638

Bitlocker recovery password

$
0
0

I am using a cpp program to search an Active Directory using the IDirectory-Search (ref: https://docs.microsoft.com/en-us/windows/win32/adsi/searching-with-idirectorysearch). 

For computer objects this function is able to fetch all attributes expect 'msFVE-RecoveryPassword' attribute and instead returning '0x80005010' (E_ADS_COLUMN_NOT_SET) on calling GetColumn function. All other attributes including other bitlocker attributes like 'msFVE-RecoveryGuid' are fetched properly.

The password is visible in ADUC properties page of the computer object and also through Bitlocker recovery password viewer. Since the 'msFVE-RecoveryPassword' is not available in security tab -> permission list, I am not able to find if the user credentials used in the program have the read permission on the attribute. But since 'msFVE-RecoveryInformation' has a common delegation, it might not be a permission issue. 

Any suggestion or troubleshooting step would be really helpful

Thanks in advance.


Viewing all articles
Browse latest Browse all 31638

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>