How to Relock the Bitlocker encrypted drive without restarting system? Adding a Direct option to the right click menu.
Here is a small and easy method for adding "Lock Drive..." to the Explorer right-click context menu.
1) Open Notepad and copy and paste following code, and save it as "Lock.reg"
Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\Drive\shell\Lock Drive...\command]
@=hex(2):77,00,73,00,63,00,72,00,69,00,70,00,74,00,2e,00,65,00,78,00,65,00,20,\
00,6d,00,61,00,6e,00,61,00,67,00,65,00,2d,00,62,00,64,00,65,00,2e,00,76,00,\
62,00,73,00,20,00,2d,00,6c,00,6f,00,63,00,6b,00,20,00,2d,00,66,00,6f,00,72,\
00,63,00,65,00,64,00,69,00,73,00,6d,00,6f,00,75,00,6e,00,74,00,20,00,25,00,\
31,00,00,00
2) Open Notepad , and paste following code, Save the following script as "manage-bde.vbs"
and copy to the folder "C:\Windows\System32"
Set oWSH = CreateObject("Wscript.Shell")
Args = ""
Last = Wscript.Arguments.Count - 1
For i = 0 To Last
Args = Args & " " & Wscript.Arguments.Item(i)
Next
Args = Replace(Args,"\","")
RetVal = oWSH.Run("manage-bde.exe" & Args,0,True)
Wscript.Quit RetVal
Alternatively, you can download both files from following link:
1.Unzip the file and it will contain two files
2. Click on the file "relock_bde" to update the registry.
3. Move the file "manage-bde-lock" to "C:\Windows\System32".
Now See This:
I have worked it around for Windows 8.
ReplyDeletethe step-by-step instructions are there in my blog...
http://nairswindow.blogspot.in/2013/01/bit-locker-in-windows-8-locking-after.html
Hello. Thank you for the wonderful write-up on how to re-lock a BitLocker drive in Windows 7.
ReplyDeleteIs there any way you could update this method so it works for Windows 8.1? Thanks so much...
tfreeborn@hotmail.com
Elevation problem can be fixed by setting the manage-bde.exe to always request for Admin permissions, (see http://stackoverflow.com/questions/17466681/how-to-run-vbs-as-administrator-from-vbs/23624900#23624900)
ReplyDeleteEg:
Windows Registry Editor Version 5.00
[HKEY_Current_User\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers]
"c:\\windows\\system32\\cmd.exe"="RUNASADMIN"