Privacy and Security Add Lock Drive with BitLocker Context Menu in Windows 11


  • Staff
BitLocker_drive_banner.png

BitLocker Drive Encryption is a data protection feature that integrates with the operating system and addresses the threats of data theft or exposure from lost, stolen, or inappropriately decommissioned drives and computers.

You can turn on BitLocker to encrypt the operating system drive (Windows drive), fixed data drives (internal hard drives), and removable data drives (external hard drive or USB flash drive).

You can choose how you want to unlock an encrypted data drive: with a password or a smart card. For removable data drives encrypted with BitLocker To Go, you can set the drive to automatically unlock when you sign in to the PC. For fixed data drives, you can also set the drive to automatically unlock when you unlock the PC, if you prefer, as long as the operating system drive is BitLocker-protected.

To lock a fixed data drive encrypted by BitLocker, you could restart the computer unless you set the drive to automatically unlock when you sign in next.

To lock a removable data drive encrypted by BitLocker To Go, you could disconnect the drive or restart the computer unless you set the drive to automatically unlock when you connect the drive or sign in next.

This tutorial will show you how to add Lock Drive to the context menu of all unlocked fixed and removable drives encrypted by BitLocker to lock the drive on demand in Windows 10 and Windows 11.

You must be signed in as an administrator to add, use, or remove the "Lock Drive" context menu.

The Lock Drive context menu can be handy since it allows you to lock the drive without having to disconnect it or restart the computer. The drive will remain locked until you manually unlock it.

If you turn on auto-unlock for a fixed data drive or removable data drive encrypted by BitLocker, then the drive cannot be locked until you turn off auto-unlock for the drive.

BitLocker Drive Encryption is only available in the Windows 11 Pro, Enterprise, and Education editions.



Contents

  • Option One: Add Lock Drive Context Menu to BitLocker Fixed and Removable Data Drives
  • Option Two: Remove Lock Drive Context Menu from BitLocker Fixed and Removable Data Drives


EXAMPLE: "Lock Drive" context menu

When you right click on an unlocked BitLocker fixed or removable drive, you will need to click/tap on Show more options first, then click/tap on Lock Drive.


Lock_drive_context_menu.png






OPTION ONE

Add Lock Drive Context Menu to BitLocker Fixed and Removable Data Drives


1 Click/tap on the Download button below to download the ZIP file below.

Add_Lock_Drive_to_context_menu.zip


2 Save the .zip file to your desktop.

3 Unblock the .zip file.

4 Open the .zip file, and extract (drag and drop) the Add_Lock_Drive_to_context_menu.reg and lock-bde.bat files to your desktop.

(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\Drive\shell\lock-bde]
"AppliesTo"="System.Volume.BitLockerProtection:=1 OR System.Volume.BitLockerProtection:=3 OR System.Volume.BitLockerProtection:=5 NOT C:"
@="Lock Drive"
"HasLUAShield"=""
"MultiSelectModel"="Single"

[HKEY_CLASSES_ROOT\Drive\shell\lock-bde\command]
@="PowerShell -windowstyle hidden -command \"Start-Process cmd -ArgumentList '/s,/c, lock-bde.bat %1' -Verb runAs\""

(Contents of BAT file for reference)
Code:
@echo off
manage-bde -lock %~d1 -ForceDismount

5 Copy/Move the lock-bde.bat file into the C:\Windows folder, and click/tap on Continue when prompted to approve. (see screenshot below)

add_lock_drive.png

6 Double click/tap on the Add_Lock_Drive_to_context_menu.reg file to merge it.

7 When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.

8 You can now delete any remaining files on your desktop if you like.





OPTION TWO

Remove Lock Drive Context Menu from BitLocker Fixed and Removable Data Drives


This is the default setting.


1 Click/tap on the Download button below to download the REG file below.

Remove_Lock_Drive_from_context_menu.reg


(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00

[-HKEY_CLASSES_ROOT\Drive\shell\lock-bde]

2 Save the .reg file to your desktop.

3 Double click/tap on the downloaded .reg file to merge it.

4 When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.

5 You can now delete the downloaded .reg file if you like.

6 Open the C:\Windows folder, delete the lock-bde.bat file, and click/tap on Continue when prompted to approve. (see screenshot below)

remove_lock_drive.png


That's it,
Shawn Brink


 

Attachments

  • BitLocker_drive.png
    BitLocker_drive.png
    5.3 KB · Views: 53
  • Add_Lock_Drive_to_context_menu.zip
    956 bytes · Views: 183
  • Remove_Lock_Drive_from_context_menu.reg
    516 bytes · Views: 115
Last edited:

TomR1945

Member
Local time
7:11 AM
Posts
10
OS
Windows 11 Pro 21H2 Build 22000.675
Thanks Brink.

The option was added to the right click menu. When I clicked it, I assume the drive closed as it just disappeared from Explorer. Where did it go?

Tom R.
 

My Computers

System One System Two

  • OS
    Windows 11 Pro 21H2 Build 22000.675
    Computer type
    PC/Desktop
    Manufacturer/Model
    Home Built
    CPU
    Intel i7-11700K 3.6 GHz
    Motherboard
    ASUS Prime Z590M - Plus
    Memory
    Team Group T-Force Vulcan 32 Gb DDR4 3600
    Graphics Card(s)
    Integrated
    Sound Card
    Integrated
    Monitor(s) Displays
    43" Vizio V436-G1
    Screen Resolution
    3840 X 2160
    Hard Drives
    C; M.2 Gen 4 1 Tb
    D: Samsung 8 Tb SSD
    E: Seagate 8 Tb HDD
    I, J, K, L: WD 14 Tb HDD
    PSU
    VEGA BP Bronze 610 Watt
    Case
    Zondda-B SPCC ATX Mid Tower
    Cooling
    Noctua NH-D9L
    Keyboard
    Logitech K850
    Mouse
    Logitech MX 25
    Internet Speed
    > 175 Mbps Down, 30 Mbps Up.
    Browser
    Google Chrome
    Antivirus
    McAfee
    Other Info
    Not a gamer. Just like tinkering. That has been the reason for many hours of searching for solutions!
  • Operating System
    Windows 11 Pro
    Computer type
    PC/Desktop
    Manufacturer/Model
    Home Built
    CPU
    Intel i5-11600K
    Motherboard
    MSI B560I Gaming Edge
    Memory
    Corsair Vengeance DDR4 3600
    Graphics card(s)
    Integrated
    Sound Card
    Integrated
    Monitor(s) Displays
    43" Vizio V436-G1
    Screen Resolution
    3840 X 2160
    Hard Drives
    C: M-2 Gen 4 Sabrent 500 Gb
    D: Samsung 1 Tb SSD
    F: Gen 4 WD Black 1 Tb
    PSU
    EVGA BP Bronze 100 BP-460
    Case
    Silverstone SST-SG13B-C
    Cooling
    Intel K69327-001
    Mouse
    Logitech MX 25
    Keyboard
    Logitech K850
    Internet Speed
    > 175 Mbps Down, >30 Mbps Up
    Browser
    Google Chrome
    Antivirus
    McAfee
    Other Info
    Just built it for something to do. Used mostly for backup for important stuff.

TomR1945

Member
Local time
7:11 AM
Posts
10
OS
Windows 11 Pro 21H2 Build 22000.675
Disregard last stupid comment. Refreshed and it is where it should be.

Sorry, I guess I'm just too impatient!:(
 

My Computers

System One System Two

  • OS
    Windows 11 Pro 21H2 Build 22000.675
    Computer type
    PC/Desktop
    Manufacturer/Model
    Home Built
    CPU
    Intel i7-11700K 3.6 GHz
    Motherboard
    ASUS Prime Z590M - Plus
    Memory
    Team Group T-Force Vulcan 32 Gb DDR4 3600
    Graphics Card(s)
    Integrated
    Sound Card
    Integrated
    Monitor(s) Displays
    43" Vizio V436-G1
    Screen Resolution
    3840 X 2160
    Hard Drives
    C; M.2 Gen 4 1 Tb
    D: Samsung 8 Tb SSD
    E: Seagate 8 Tb HDD
    I, J, K, L: WD 14 Tb HDD
    PSU
    VEGA BP Bronze 610 Watt
    Case
    Zondda-B SPCC ATX Mid Tower
    Cooling
    Noctua NH-D9L
    Keyboard
    Logitech K850
    Mouse
    Logitech MX 25
    Internet Speed
    > 175 Mbps Down, 30 Mbps Up.
    Browser
    Google Chrome
    Antivirus
    McAfee
    Other Info
    Not a gamer. Just like tinkering. That has been the reason for many hours of searching for solutions!
  • Operating System
    Windows 11 Pro
    Computer type
    PC/Desktop
    Manufacturer/Model
    Home Built
    CPU
    Intel i5-11600K
    Motherboard
    MSI B560I Gaming Edge
    Memory
    Corsair Vengeance DDR4 3600
    Graphics card(s)
    Integrated
    Sound Card
    Integrated
    Monitor(s) Displays
    43" Vizio V436-G1
    Screen Resolution
    3840 X 2160
    Hard Drives
    C: M-2 Gen 4 Sabrent 500 Gb
    D: Samsung 1 Tb SSD
    F: Gen 4 WD Black 1 Tb
    PSU
    EVGA BP Bronze 100 BP-460
    Case
    Silverstone SST-SG13B-C
    Cooling
    Intel K69327-001
    Mouse
    Logitech MX 25
    Keyboard
    Logitech K850
    Internet Speed
    > 175 Mbps Down, >30 Mbps Up
    Browser
    Google Chrome
    Antivirus
    McAfee
    Other Info
    Just built it for something to do. Used mostly for backup for important stuff.

Brink

Administrator
Staff member
MVP
Thread Starter
Local time
6:11 AM
Posts
4,847
OS
Windows 11 Pro for Workstations
Disregard last stupid comment. Refreshed and it is where it should be.

Sorry, I guess I'm just too impatient!:(
No worries Tom. I'm glad it could help. :-)
 

My Computers

System One System Two

  • OS
    Windows 11 Pro for Workstations
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom self build
    CPU
    Intel i7-8700K 5 GHz
    Motherboard
    ASUS ROG Maximus XI Formula Z390
    Memory
    16 GB (8GBx2) G.SKILL TridentZ DDR4 3200 MHz
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING
    Sound Card
    Integrated Digital Audio (S/PDIF)
    Monitor(s) Displays
    2 x Samsung Odyssey G75 27"
    Screen Resolution
    2560x1440
    Hard Drives
    1TB Samsung 980 PRO M.2,
    1TB Samsung 970 EVO Plus M.2,
    6TB WD Black WD6001FZWX
    8TB WD MyCloudEX2Ultra NAS
    PSU
    Seasonic Prime Titanium 850W
    Case
    Thermaltake Core P3 wall mounted
    Cooling
    Corsair Hydro H115i
    Keyboard
    Logitech wireless K800
    Mouse
    Logitech MX Master 3
    Internet Speed
    1 Gbps Download and 35 Mbps Upload
    Browser
    Google Chrome
    Antivirus
    Microsoft Defender and Malwarebytes Premium
    Other Info
    Logitech Z625 speaker system,
    Logitech BRIO 4K Pro webcam,
    HP Color LaserJet Pro MFP M477fdn,
    Linksys EA9500 router,
    Motorola MB8611 cable modem,
    APC SMART-UPS RT 1000 XL - SURT1000XLI,
    Galaxy S20 Ultra 5G phone
  • Operating System
    Windows 11 Pro for Workstations
    Computer type
    Laptop
    Manufacturer/Model
    HP Spectre x360 2in1
    CPU
    i7-1065G7 3.9 GHz
    Memory
    16 GB LPDDR4-3200
    Graphics card(s)
    Intel Iris Plus
    Sound Card
    Intel SST
    Monitor(s) Displays
    13.3" 4K UWVA AMOLED multitouch
    Screen Resolution
    3840 x 2160
    Hard Drives
    512 GB PCIe NVMe M.2 SSD
    Browser
    Google Chrome
    Antivirus
    Windows Defender and Malwarebytes Premium
Top Bottom