This script fixes the windows CIS Benchmark check 18.10.9.1.7: "Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Save BitLocker recovery information to AD DS for fixed data drives' is set to 'Enabled: False'."
• Creates HKLM\SOFTWARE\Policies\Microsoft\FVE if missing. • Writes/overwrites DWORD FDVActiveDirectoryBackup = 1 in BOTH registry views (Registry64 and Registry32). • Idempotent: rerunning simply re-applies the compliant value.
.\Set-BitLockerADBackupFixed.ps1This script fixes the windows CIS Benchmark check 18.10.9.1.7: "Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Save BitLocker recovery information to AD DS for fixed data drives' is set to 'Enabled: False'."
• Creates HKLM\SOFTWARE\Policies\Microsoft\FVE if missing. • Writes/overwrites DWORD FDVActiveDirectoryBackup = 1 in BOTH registry views (Registry64 and Registry32). • Idempotent: rerunning simply re-applies the compliant value.
.\Set-BitLockerADBackupFixed.ps1