When BitLocker Drive Encryption is enabled on a Windows workstation or laptop, the recovery password (a 48-digit numerical key) can be backed up to Active Directory Domain Services (AD DS).
The key principle: .