Provide the unique identifiers for your organization: registry value IdentificationField and 2 moreComputerHKLM\Software\Policies\Microsoft\FVE

Policy ID: IdentificationField_Name
Scope: Computer Configuration
Supported on: At least Windows Server 2008 R2 or Windows 7
Source: Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
Category: Windows Components › BitLocker Drive Encryption

This policy setting allows you to associate unique organizational identifiers to a new drive that is enabled with BitLocker. These identifiers are stored as the identification field and allowed identification field. The identification field allows you to associate a unique organizational identifier to BitLocker-protected drives. This identifier is automatically added to new BitLocker-protected drives and can be updated on existing BitLocker-protected drives using the manage-bde command-line tool. An identification field is required for management of certificate-based data recovery agents on BitLocker-protected drives and for potential updates to the BitLocker To Go Reader. BitLocker will only manage and update data recovery agents when the identification field on the drive matches the value configured in the identification field. In a similar manner, BitLocker will only update the BitLocker To Go Reader when the identification field on the drive matches the value configured for the identification field.

See the full description on the Group Policy page ›

Registry

IdentificationField

REG_DWORDComputer

HKLM\Software\Policies\Microsoft\FVE Current key

Enabled value: 1
Disabled value: 0

Apply with .reg · CMD · PowerShell

.reg

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE]

; Options (use only one)
; Enabled
"IdentificationField"=dword:00000001
; Disabled
"IdentificationField"=dword:00000000

CMD

:: Options (use only one)

:: Enabled
reg add "HKLM\Software\Policies\Microsoft\FVE" /v "IdentificationField" /t REG_DWORD /d 1 /f
:: Disabled
reg add "HKLM\Software\Policies\Microsoft\FVE" /v "IdentificationField" /t REG_DWORD /d 0 /f

PowerShell

# Common: create the key
New-Item -Path 'HKLM:\Software\Policies\Microsoft\FVE' -Force | Out-Null

# Options (use only one)
# Enabled
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\FVE' -Name 'IdentificationField' -PropertyType DWord -Value 1 -Force | Out-Null
# Disabled
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\FVE' -Name 'IdentificationField' -PropertyType DWord -Value 0 -Force | Out-Null

IdentificationFieldString

REG_SZComputer

HKLM\Software\Policies\Microsoft\FVE Current key

Enabled value: Depends on the option value
Element: BitLocker identification field:
Value type: REG_SZ
Maximum length: 260

Apply with .reg · CMD · PowerShell

.reg

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE]

; Value names and types follow the ADMX. Replace <enter value> below with your own data
"IdentificationFieldString"="<enter value>"

CMD

:: Value names and types follow the ADMX. Replace <enter value> below with your own data

reg add "HKLM\Software\Policies\Microsoft\FVE" /v "IdentificationFieldString" /t REG_SZ /d "<enter value>" /f

PowerShell

# Value names and types follow the ADMX. Replace <enter value> below with your own data

New-Item -Path 'HKLM:\Software\Policies\Microsoft\FVE' -Force | Out-Null
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\FVE' -Name 'IdentificationFieldString' -PropertyType String -Value '<enter value>' -Force | Out-Null

SecondaryIdentificationField

REG_SZComputer

HKLM\Software\Policies\Microsoft\FVE Current key

Enabled value: Depends on the option value
Element: Allowed BitLocker identification field:
Value type: REG_SZ
Maximum length: 260

Apply with .reg · CMD · PowerShell

.reg

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FVE]

; Value names and types follow the ADMX. Replace <enter value> below with your own data
"SecondaryIdentificationField"="<enter value>"

CMD

:: Value names and types follow the ADMX. Replace <enter value> below with your own data

reg add "HKLM\Software\Policies\Microsoft\FVE" /v "SecondaryIdentificationField" /t REG_SZ /d "<enter value>" /f

PowerShell

# Value names and types follow the ADMX. Replace <enter value> below with your own data

New-Item -Path 'HKLM:\Software\Policies\Microsoft\FVE' -Force | Out-Null
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\FVE' -Name 'SecondaryIdentificationField' -PropertyType String -Value '<enter value>' -Force | Out-Null