Home

Add a button to the Windows Explorer for Locking a BitLocker drive After unlocking it

%3CLINGO-SUB%20id%3D%22lingo-sub-809438%22%20slang%3D%22en-US%22%3EAdd%20a%20button%20to%20the%20Windows%20Explorer%20for%20Locking%20a%20BitLocker%20drive%20After%20unlocking%20it%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-809438%22%20slang%3D%22en-US%22%3E%3CP%3EThere%20needs%20to%20be%20that%20button%20so%20we%20won't%20have%20to%20restart%20our%20computer%20in%20order%20to%20lock%20a%20drive.%20OR%20an%20auto-lock%20feature%20so%20the%20drive%20will%20get%20locked%20if%20not%20accessed%20for%20X%20minutes.%3C%2FP%3E%3CP%3EUpvote%20this%20feedback%20if%20you%20agree%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Faka.ms%2FAA5ufg0%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Faka.ms%2FAA5ufg0%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-809438%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3Ebitlocker%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EWindows%20Insider%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-811702%22%20slang%3D%22en-US%22%3ERe%3A%20Add%20a%20button%20to%20the%20Windows%20Explorer%20for%20Locking%20a%20BitLocker%20drive%20After%20unlocking%20it%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-811702%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F310193%22%20target%3D%22_blank%22%3E%40HotCakeX%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EUpvoted%2C%20though%20to%20be%20honest%20most%20times%20a%20bit-locker%20drive%20is%20unlocked%20I'd%20hope%20that%20the%20user%20would%20retain%20control%20of%20their%20session%20and%20not%20have%20someone%20unauthorised%20jump%20on%20and%20access%20sensitive%20data.%20I'm%20sure%20there%20a%20use-cases%20I%20haven't%20thought%20of%20though.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EJust%20in%20case%20your%20not%20aware%2C%20as%20a%20workaround%20you%20can%20lock%20via%20command%20prompt%20and%20powershell%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ECommand%20prompt%20(assuming%20D%3Ais%20the%20Bitlocker%20drive)%3A%26nbsp%3B%3CEM%3Emanage-bde%20-lock%20%22D%3A%22%3C%2FEM%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EPowershell%20(assuming%20D%3Ais%20the%20Bitlocker%20drive)%3A%26nbsp%3B%3CEM%3ELock-BitLocker%20-MountPoint%20%22D%3A%5C%22%3C%2FEM%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBit%20of%20a%20hassle%2C%20but%20hopefully%20potentially%20save%20you%20some%20extra%20reboots.%26nbsp%3B%3CIMG%20class%3D%22lia-deferred-image%20lia-image-emoji%22%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Fhtml%2Fimages%2Femoticons%2Fsmile_40x40.gif%22%20alt%3D%22%3Asmile%3A%22%20title%3D%22%3Asmile%3A%22%20%2F%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-811804%22%20slang%3D%22en-US%22%3ERe%3A%20Add%20a%20button%20to%20the%20Windows%20Explorer%20for%20Locking%20a%20BitLocker%20drive%20After%20unlocking%20it%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-811804%22%20slang%3D%22en-US%22%3EThanks.%20yes%20I%20knew%20about%20the%20command%20but%20as%20an%20insider%20tester%20I%20put%20myself%20instead%20of%20majority%20of%20Windows%2010%20users%20that%20rely%20on%20the%20GUI.%3CBR%20%2F%3EI%20had%20hoped%20that%20at%20least%20a%20logout%20from%20Windows%20account%20would%20have%20locked%20the%20Bitlocker%20drive%20but%20then%20i%20found%20out%20Bitlocker%20is%20a%20system%20wide%20encryption%2C%20it%20doesn't%20care%20about%20the%20user%20account.%3CBR%20%2F%3Eanother%20feature%20I%20hope%20to%20see%20in%20the%20next%20version%20of%20Windows%20is%20the%20ability%20to%20lock%20a%20single%20folder.%3CBR%20%2F%3Efor%20those%20kinds%20of%20flexibility%20i%20keep%20using%20VeraCrypt%2C%20at%20least%20until%20Microsoft%20adds%20those%20basic%20features.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-811837%22%20slang%3D%22en-US%22%3ERe%3A%20Add%20a%20button%20to%20the%20Windows%20Explorer%20for%20Locking%20a%20BitLocker%20drive%20After%20unlocking%20it%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-811837%22%20slang%3D%22en-US%22%3E%3CBLOCKQUOTE%3E%3CHR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F310193%22%20target%3D%22_blank%22%3E%40HotCakeX%3C%2FA%3E%26nbsp%3Bwrote%3A%3CBR%20%2F%3E%3CBR%20%2F%3EI%20had%20hoped%20that%20at%20least%20a%20logout%20from%20Windows%20account%20would%20have%20locked%20the%20Bitlocker%20drive%20but%20then%20i%20found%20out%20Bitlocker%20is%20a%20system%20wide%20encryption%2C%20it%20doesn't%20care%20about%20the%20user%20account.%3CBR%20%2F%3E%3CBR%20%2F%3E%3CHR%20%2F%3E%3C%2FBLOCKQUOTE%3E%3CP%3EWell%20TIL%20that%20logging%20out%20doesn't%20lock%20the%20drive%20-%20we've%20been%20using%20Bitlocker%20mostly%20for%20OS%20disk%20and%20Bitlocker%20to%20Go%20with%20USBs%20on%20the%20understanding%20that%20once%20a%20user%20is%20finished%20with%20it%20they'll%20eject%20it%20out%20and%20get%20prompted%20if%20they%20add%20it%20back%20on%20-%20but%20of%20course%20this%20isn't%20very%20helpful%20for%20fixed%20HDD%2FSSDs.%20Didn't%20realise%20that%20a%20drive%20stays%20unlocked%20between%20user%20sessions.%3C%2FP%3E%3C%2FLINGO-BODY%3E
HotCakeX
Respected Contributor

There needs to be that button so we won't have to restart our computer in order to lock a drive. OR an auto-lock feature so the drive will get locked if not accessed for X minutes.

Upvote this feedback if you agree: https://aka.ms/AA5ufg0

3 Replies

@HotCakeX 

 

Upvoted, though to be honest most times a bit-locker drive is unlocked I'd hope that the user would retain control of their session and not have someone unauthorised jump on and access sensitive data. I'm sure there a use-cases I haven't thought of though.

 

Just in case your not aware, as a workaround you can lock via command prompt and powershell

 

Command prompt (assuming D: is the Bitlocker drive): manage-bde -lock "D:"

 

Powershell (assuming D: is the Bitlocker drive): Lock-BitLocker -MountPoint "D:\"

 

Bit of a hassle, but hopefully potentially save you some extra reboots. :smile:

Thanks. yes I knew about the command but as an insider tester I put myself instead of majority of Windows 10 users that rely on the GUI.
I had hoped that at least a logout from Windows account would have locked the Bitlocker drive but then i found out Bitlocker is a system wide encryption, it doesn't care about the user account.
another feature I hope to see in the next version of Windows is the ability to lock a single folder.
for those kinds of flexibility i keep using VeraCrypt, at least until Microsoft adds those basic features.

@HotCakeX wrote:

I had hoped that at least a logout from Windows account would have locked the Bitlocker drive but then i found out Bitlocker is a system wide encryption, it doesn't care about the user account.


Well TIL that logging out doesn't lock the drive - we've been using Bitlocker mostly for OS disk and Bitlocker to Go with USBs on the understanding that once a user is finished with it they'll eject it out and get prompted if they add it back on - but of course this isn't very helpful for fixed HDD/SSDs. Didn't realise that a drive stays unlocked between user sessions.

Related Conversations
Tabs and Dark Mode
cjc2112 in Discussions on
35 Replies
Extentions Synchronization
Deleted in Discussions on
3 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies
How to Prevent Teams from Auto-Launch
chenrylee in Microsoft Teams on
29 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
9 Replies