The 'Do not enable BitLocker until recovery information is stored to AD DS for fixed data drives' setting should be configured correctly.
enabled/disabled
(1) GPO: Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Fixed Data Drives\s2-o7\Do not enable BitLocker until recovery information is stored to AD DS for fixed data drives
(2) Registry Key: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE\FDVRequireActiveDirectoryBackup
Worksheet: Bitlocker Policy Settings; Row: 14
Setting Index #843: This is a setting option. Refer to the following parent setting for additional information: Choose how BitLocker-protected fixed data drives can be recovered
http://technet.microsoft.com/en-us/library/ee706521(WS.10).aspx
oval:org.secpod.oval:def:14730
Microsoft Security Compliance Management Toolkit for Windows 7, Windows 7 Security Baseline Settings.xlsm
2009-10-01
Microsoft Security Compliance Management Toolkit for Windows 7, Windows 7 Security Baseline.xml
2009-10-01
Microsoft TechNet and other Microsoft online documentation and resources
Microsoft
HTML
SCAP Repo OVAL Definition
2013-08-13