Restrict users from recovering the BitLocker key(s) for their owned devices You can restrict access with the Microsoft Graph Note: You can find the PowerShell script in this repository! The configuration can also be done in the Entra Admin Center. Now, when a person logs into https://myaccount.microsoft.com/ and accesses the devices, the recovery keys cannot be accessed.