bitLockerRecoveryOptions resource type

Important: APIs under the / beta version in Microsoft Graph are in preview and are subject to change. Use of these APIs in production applications is not supported.

Note: Using the Microsoft Graph APIs to configure Intune controls and policies still requires that the Intune service is correctly licensed by the customer.

BitLocker Recovery Options.

Properties

Property Type Description
blockDataRecoveryAgent Boolean Indicates whether to block certificate-based data recovery agent.
recoveryPasswordUsage configurationUsage Indicates whether users are allowed or required to generate a 48-digit recovery password for fixed or system disk. Possible values are: blocked, required, allowed.
recoveryKeyUsage configurationUsage Indicates whether users are allowed or required to generate a 256-bit recovery key for fixed or system disk. Possible values are: blocked, required, allowed.
hideRecoveryOptions Boolean Indicates whether or not to allow showing recovery options in BitLocker Setup Wizard for fixed or system disk.
enableRecoveryInformationSaveToStore Boolean Indicates whether or not to allow BitLocker recovery information to store in AD DS.
recoveryInformationToStore bitLockerRecoveryInformationType Configure what pieces of BitLocker recovery information are stored to AD DS. Possible values are: passwordAndKey, passwordOnly.
enableBitLockerAfterRecoveryInformationToStore Boolean Indicates whether or not to enable BitLocker until recovery information is stored in AD DS.

Relationships

None

JSON Representation

Here is a JSON representation of the resource.

{
  "@odata.type": "#microsoft.graph.bitLockerRecoveryOptions",
  "blockDataRecoveryAgent": true,
  "recoveryPasswordUsage": "String",
  "recoveryKeyUsage": "String",
  "hideRecoveryOptions": true,
  "enableRecoveryInformationSaveToStore": true,
  "recoveryInformationToStore": "String",
  "enableBitLockerAfterRecoveryInformationToStore": true
}