> can't be remotely reset In an Active Directory environment, Group Policy can store BitLocker recovery keys within AD. Self-service key recovery and rotation

> can't be remotely reset In an Active Directory environment, Group Policy can store BitLocker recovery keys within AD. Self-service key recovery and rotation is an option with Intune and other device management platforms. In the context of a personal computer, signing in with or linking a Microsoft account can provide the same functionality. > shared computer BitLocker Network Unlock solves this for fixed-location devices.