Get Bitlocker Recovery Key From Active Directory [verified] Jun 2026

QEMU is an emulator for various CPUs. It works on Linux, Windows, FreeBSD and Mac OS X. Windows version is in an alpha stage. I hope I can provide useful information on development and usage of the software.

What's New!

• January 3, 2011: added Qemu-0.13.0-windows-Bios.zip which overrides the vga bioses for the 0.13.0 version (See the patch file vgabios-fix.diff and the corresponding debian bug report - Instructions for generating the bioses on cygwin will be provided later)
• August 22, 2011: updated for Qemu-0.14.0 and Qemu-0.15.0
• September 07, 2011: corrected the Qemu-0.14.0 and Qemu-0.15.0 zip files (thanks to Rolando A. Lopez for pointing to the packaging error: all DLLs were missing!)
• October 18, 2011: corrected the Qemu-0.14.0 and Qemu-0.15.0 zip files again (thanks to Simon Eigeldinger for pointing to the packaging error still present!) + updated for Qemu-0.15.1 + sha1sum available for my downloads (see below)
• November 1, 2011: corrected the Qemu-0.15.1 zip file (thanks to Scott LaBombard and John Taylor for reporting the compilation/link error!)
• February 13, 2012: updated for Qemu-1.0 : contains qemu-system-arm.exe, qemu-system-i386.exe, qemu-system-ppc.exe, qemu-system-sparc.exe, qemu-system-x86_64.exe and the linux-0.2.img image. libusb is now removed as it is not working correctly.
• February 29, 2012: updated for Qemu-1.0.1 - Still a "to be tested" version. See bug report win32: git rev 59f971d crashes when accessing disk (coroutine issue). In my version a workaround was to compile coroutine-win32.c without optimisation (-O0): contains qemu-system-arm.exe, qemu-system-i386.exe, qemu-system-ppc.exe, qemu-system-sparc.exe, qemu-system-x86_64.exe and the linux-0.2.img image

Latest Windows binaries (includes FMOD support and SDL 1.2.15) :

• -Lite packages means that only the i386 virtual machine is compiled and available.
• -Medium contains also ARM, PPC and usually SPARC virtual machines.

• Qemu-1.0.1-windows.zip (18.0M) (NEW)
• Qemu-1.0-windows.zip (17.7M)
• Qemu-0.15.1-windows-Medium.zip (5.97M)

sha1sum :

• Use the .sha1 files from the release directory...
• See here for usage of sha1sum.

Old Windows binaries :

• browse the release directory...

Links :

• QEMU : http://www.qemu.org/
• SDL : http://www.libsdl.org/
• MinGW : http://www.mingw.org/
• Cygwin: : http://www.cygwin.com/
• Qemu on windows :: Old Qemu on windows page, Tips

How to build

NEW build done with MinGW (as it doesn't compile anymore with cygwin) The main difference is now that the build is done with MinGW by using the latest version of gcc.
You need the following packages (downloadable with the MinGW installer program) :

GLIB for MinGW :
Fetched GTK+ Bundle for mingw
You need the following package http://ftp.gnome.org/pub/gnome/binaries/win32/gtk+/2.24/gtk+-bundle_2.24.8-20111122_win32.zip

ZLIB for MinGW :
You need the following packages
http://sourceforge.net/projects/mingw/files/MinGW/Extension/zlib/zlib-1.2.5-4/libz-1.2.5-4-mingw32-dll-1.tar.lzma/download and
http://sourceforge.net/projects/mingw/files/MinGW/Extension/zlib/zlib-1.2.5-4/libz-1.2.5-4-mingw32-dev.tar.lzma/download

Note: everything is installed for me in D:\MinGW.Those tar files can be extracted with the -J option of cygwin's tar if needed as the cygwin's shell is still used by me (and not the MSYS version).

SDL for MinGW :
Fetched SDL-devel-1.2.15-mingw32.tar.gz from SDL site.

DirectX:
Fetched http://sourceforge.net/projects/mingwdx/files/latest/download?source=files
and files from http://www.filehat.com/folders.php?fid=134

Qemu:

• Fetch the source code: http://wiki.qemu.org/download/qemu-1.0.1.tar.gz (or here: qemu-1.0.1.tar.gz)
• Optionally fetch the fmod library: http://www.fmod.org/index.php/release/version/fmodapi375win.zip (or here: fmodapi375win.zip)
• Fetch and install the patches: qemu-1.0.1-patch.
  This patch is based on the original patches found here: http://www.h7.dion.ne.jp/~qemu-win/download/qemu-0.9.0-patches.zip plus my additional work
• Prepare the Cygwin/MinGW environement:
  Created some links in a bin directory to ease the calls to the MinGW tools:

  export PATH=/cygdrive/d/MinGW/bin:/home/lassauge/MyDocuments/Qemu/libusb-win32-device-bin-0.1.12.2/bin:$HOME/bin:/usr/local/bin:/usr/bin:/bin:/usr/X11R6/bin
  cd $HOME/bin
  ln -s /cygdrive/d/MinGW/bin/dlltool.exe i586-mingw32-dlltool
  ln -s /cygdrive/d/MinGW/bin/ld.exe i586-mingw32-ld
  ln -s /cygdrive/d/MinGW/bin/windres.exe i586-mingw32-windres
  

• Created a gcc wrapper to trap some of the POSIX file names to Windows file name: rename it to i586-mingw32-gcc
  Fetch the source code: gcc-wrapper.sh

  Review the list of attached recovery keys. They are listed by date and Recovery Key ID.

  You can verify the attributes are present using PowerShell:

  needed to ensure all future computers automatically save their keys to AD? BitLocker recovery process - Microsoft Learn

  $KeyID = "ABC12345" # Replace with the first 8 characters of the Recovery ID Get-ADObject -Filter "objectClass -eq 'msFVE-RecoveryInformation' -and Name -like '*$KeyID*'" -Properties msFVE-RecoveryPassword | Select-Object Name, msFVE-RecoveryPassword Use code with caution. Troubleshooting Missing Keys

  : The "BitLocker Recovery Password Viewer" must be installed as part of the Remote Server Administration Tools (RSAT) on your management machine or domain controller.

  Before trying to view keys, ensure you meet the following requirements:

  : The device may have been encrypted before the AD backup policy was active. You can force a backup to AD from the client machine using: manage-bde -protectors -adbackup C: -id Your-Protector-ID Best Practices for the Future

  Navigate to > Optional features (or Apps > Optional features ). Click Add a feature / View features .

  Notes:

  Type the first 8 characters of the Password ID into the search field.

  $computerName = "WS-LAPTOP-0452" $computerDN = (Get-ADComputer $computerName).DistinguishedName Get-ADObject -Filter ObjectClass -eq 'msFVE-RecoveryInformation' -SearchBase $computerDN -Properties msFVE-RecoveryPassword | Select-Object Name, msFVE-RecoveryPassword, Created

  The BitLocker Recovery Password Viewer feature must be installed on your domain controller or management machine. Method 1: Using Active Directory Users and Computers (ADUC)

• Configure:
  

  ./configure --target-list="i386-softmmu arm-softmmu sparc-softmmu ppc-softmmu x86_64-softmmu"\
   --cc=i586-mingw32-gcc --host-cc=/usr/bin/gcc --audio-drv-list="dsound sdl fmod"\
   --audio-card-list="ac97 es1370 sb16 cs4231a adlib gus"\
   --prefix=/home/lassauge/MyDocuments/Qemu-windows \
   --fmod-lib=/home/lassauge/Qemu/fmodapi375win/api/lib/libfmod.a \
   --fmod-inc=/home/lassauge/Qemu/fmodapi375win/api/inc \
   --enable-pie --disable-vnc-jpeg --disable-strip
  

• Modify the generated Makefile for calling windres from MinGW:

  125c125
  <       $(call quiet-command,$(WINDRES) -I. -o $@ $<,"  RC    $(TARGET_DIR)$@")
  ---
  >      $(call quiet-command,$(WINDRES) -I. -o $@ '$(shell cygpath -w $<)',"  RC    $(TARGET_DIR)$@")
  

• Make: If you want to see what is exactly compiled use V=1 make
• Install: do not forget to add:

  SDL.dll, 
  fmod.dll, 
  intl.dll, 
  libgcc_s_dw2-1.dll, 
  libglib-2.0-0.dll, 
  libgthread-2.0-0.dll, 
  libpng14-14.dll, 
  libssp-0.dll, 
  zlib1.dll
  

This program is provided as is and without any warranty.