A recent quick project was to enable storage of Bitlocker recovery data within
Active Directory, instead of our moderately secure encrypted drive of
text-files.
This is actually a really easy process (assuming you only have Windows 7 /
2008R2 and up on the domain), only needing to make a few adjustments