"Lock Drive" - Add to Context Menu of BitLocker Drives

Add "Lock Drive" to Unlocked BitLocker Drives Context Menu in Windows 7 and Windows 8


information   Information
To lock an unlocked fixed data drive (ex: internal hard drive) encrypted by BitLocker, you would normally restart the computer.

To lock an unlocked removable data drive (ex: USB drive) encrypted by BitLocker, you would normally disconnect it or restart the computer.

In Windows 8, if you have auto-unlock turned on for a data drive, then it will automatically be unlocked when connected (removable data drive) or you sign in to Windows 8 (fixed data drive).


This tutorial will show you how to add "Lock Drive" to the context menu of all unlocked fixed and removable data drives encrypted by BitLocker to be able to lock the drive in Windows 7 and Windows 8 without having to restart the computer for fixed data drives, disconnect removable data drives, and still be able to leave auto-unlock turned on for any data drives.

Note   Note
You must be signed in as an administrator to be able to do the steps in the tutorial, and to be able to use the "Lock Drive" context menu item.

"Lock Drive" is purposely not added to the context menu of the C: OS drive since it contains the current running operating system, and cannot be locked while Windows 8 is running.

warning   Warning
In Windows 7, BitLocker Drive Encryption is only available in the Windows 7 Ultimate and Windows 7 Enterprise editions.

In Windows 8, BitLocker Drive Encryption is only available in the Windows 8 Pro and Windows 8 Enterprise editions.


EXAMPLE: "Lock Drive" in Context Menu
Lock_Drive_Context_Menu.jpg





OPTION ONE

To Add "Lock Drive" to Context Menu of Unlocked BitLocker Drives


1. Click/tap on the Download button below to download the .ZIP file below.​
Add_Lock_Drive_to_Context_Menu.zip
download

2. Save the .ZIP file to your desktop, and open it.​
3. Extract (drag and drop) the contents (.vbs and .reg files) from inside the ZIP file to your desktop.​
4. Unblock the extracted lock-bde.vbs file.​
5. In File Explorer (Windows 8) or Windows Explorer (Windows 7), navigate to C:\Windows\System32, and copy/move the lock-bde.vbs file into the System32 folder.​
6. If prompted, click/tap on Continue and Yes to approve.​
7. Double click/tap on the extracted .reg file to merge it.​
8. If prompted, click/tap on Run, Yes (UAC), Yes, and OK.​
Note   Note
When you lock a drive encrypted by BitLocker, you will be prompted by UAC to click/tap on "Yes" to approve first. After a moment, the drive will be locked.

Note   Note

If the drive has been turned off due to being idle, then it will take a few more seconds to be locked while it waits for the HDD to spin back up.​








OPTION TWO

Remove "Lock Drive" from Context Menu of Unlocked BitLocker Drives


NOTE: This is the default setting.
1. Click/tap on the Download button below to download the .reg file below.​
Remove_Lock_Drive_from_Context_Menu.reg
download
2. Save the .reg file to your desktop.​
3. Double click/tap on the .reg file to merge it.​
4. If prompted, click/tap on Run, Yes (UAC), Yes, and OK.​
5. In File Explorer (Windows 8) or Windows Explorer (Windows 7), navigate to C:\Windows\System32, and delete the lock-bde.vbs file.​
6. If prompted, click/tap on Yes (UAC) to approve deleting the lock-bde.vbs file.​


That's it,
Shawn


 

Attachments

  • Add_Lock_Drive_to_Context_Menu.zip
    1,008 bytes · Views: 15,316
  • Remove_Lock_Drive_from_Context_Menu.reg
    510 bytes · Views: 4,236
  • Locked_Drive.png
    Locked_Drive.png
    18.2 KB · Views: 375
Last edited by a moderator:
Hi th3dark,
Thanks so much for your reply, tried it and yes it works, amazing.
Sorry took so long, was away.
 

My Computer

System One

  • OS
    Windows 10 Pro 64 bit
    Computer type
    PC/Desktop
    CPU
    Intel i7
    Memory
    16 gb
Thank you for confirming. :)
 

My Computer

System One

  • OS
    64-bit Windows 10
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Custom self built
    CPU
    Intel i7-8700K OC'd to 5 GHz
    Motherboard
    ASUS ROG Maximus XI Formula Z390
    Memory
    64 GB (4x16GB) G.SKILL TridentZ RGB DDR4 3600 MHz (F4-3600C18D-32GTZR)
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING
    Sound Card
    Integrated Digital Audio (S/PDIF)
    Monitor(s) Displays
    2 x Samsung Odyssey G7 27"
    Screen Resolution
    2560x1440
    Hard Drives
    1TB Samsung 990 PRO M.2,
    4TB Samsung 990 PRO PRO M.2,
    8TB WD MyCloudEX2Ultra NAS
    PSU
    OCZ Series Gold OCZZ1000M 1000W
    Case
    Thermaltake Core P3
    Cooling
    Corsair Hydro H115i
    Keyboard
    Logitech wireless K800
    Mouse
    Logitech MX Master 3
    Internet Speed
    1 Gb/s Download and 35 Mb/s Upload
    Browser
    Internet Explorer 11
    Antivirus
    Malwarebyte Anti-Malware Premium
    Other Info
    Logitech Z625 speaker system,
    Logitech BRIO 4K Pro webcam,
    HP Color LaserJet Pro MFP M477fdn,
    APC SMART-UPS RT 1000 XL - SURT1000XLI,
    Galaxy S23 Plus phone
Used option one on a partition in Windows 10 Pro and it worked like a charm. Thank you.

I looked for this in the tenforums but to no avail. Perhaps a link there, to here?
 

My Computer

System One

  • OS
    Windows 10 Pro 64bit
    Computer type
    Laptop
    System Manufacturer/Model
    Toshiba Satellite P50t
    CPU
    Intel i7-4700MQ @ 2.40Ghz
    Memory
    8.00GB
    Graphics Card(s)
    GeForce GT745M
    Sound Card
    Realtek Integrated chip
    Monitor(s) Displays
    Generic LCD
    Screen Resolution
    1920x1080
    Hard Drives
    Toshiba MQ01ABD100H (it's a Hybrid) One TB with 8GB integrated SSD
    PSU
    none
    Case
    n/a
    Cooling
    n/a
    Keyboard
    integrated_Backlit
    Mouse
    m/a
    Internet Speed
    Full Speed Fibre
    Browser
    IE/Firefox/Chrome
    Antivirus
    Windows Defender
Not clear as to what option one is?
Which partition do you mean, the "C" drive, or another?
Thanks
 

My Computer

System One

  • OS
    Windows 10 Pro 64 bit
    Computer type
    PC/Desktop
    CPU
    Intel i7
    Memory
    16 gb
Used option one on a partition in Windows 10 Pro and it worked like a charm. Thank you.

I looked for this in the tenforums but to no avail. Perhaps a link there, to here?

Yeah, I haven't made a version for www.tenforums.com yet, but it works the same for Windows 10. :)
 

My Computer

System One

  • OS
    64-bit Windows 10
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Custom self built
    CPU
    Intel i7-8700K OC'd to 5 GHz
    Motherboard
    ASUS ROG Maximus XI Formula Z390
    Memory
    64 GB (4x16GB) G.SKILL TridentZ RGB DDR4 3600 MHz (F4-3600C18D-32GTZR)
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING
    Sound Card
    Integrated Digital Audio (S/PDIF)
    Monitor(s) Displays
    2 x Samsung Odyssey G7 27"
    Screen Resolution
    2560x1440
    Hard Drives
    1TB Samsung 990 PRO M.2,
    4TB Samsung 990 PRO PRO M.2,
    8TB WD MyCloudEX2Ultra NAS
    PSU
    OCZ Series Gold OCZZ1000M 1000W
    Case
    Thermaltake Core P3
    Cooling
    Corsair Hydro H115i
    Keyboard
    Logitech wireless K800
    Mouse
    Logitech MX Master 3
    Internet Speed
    1 Gb/s Download and 35 Mb/s Upload
    Browser
    Internet Explorer 11
    Antivirus
    Malwarebyte Anti-Malware Premium
    Other Info
    Logitech Z625 speaker system,
    Logitech BRIO 4K Pro webcam,
    HP Color LaserJet Pro MFP M477fdn,
    APC SMART-UPS RT 1000 XL - SURT1000XLI,
    Galaxy S23 Plus phone
Not clear as to what option one is?
Which partition do you mean, the "C" drive, or another?
Thanks

Hello Boomer, :)

He's referring to using the OPTION ONE section on the first page of this tutorial.

The "Lock Drive" context menu can be used on any drive that you have previously turned on BitLocker for to encrypt it.
 

My Computer

System One

  • OS
    64-bit Windows 10
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Custom self built
    CPU
    Intel i7-8700K OC'd to 5 GHz
    Motherboard
    ASUS ROG Maximus XI Formula Z390
    Memory
    64 GB (4x16GB) G.SKILL TridentZ RGB DDR4 3600 MHz (F4-3600C18D-32GTZR)
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING
    Sound Card
    Integrated Digital Audio (S/PDIF)
    Monitor(s) Displays
    2 x Samsung Odyssey G7 27"
    Screen Resolution
    2560x1440
    Hard Drives
    1TB Samsung 990 PRO M.2,
    4TB Samsung 990 PRO PRO M.2,
    8TB WD MyCloudEX2Ultra NAS
    PSU
    OCZ Series Gold OCZZ1000M 1000W
    Case
    Thermaltake Core P3
    Cooling
    Corsair Hydro H115i
    Keyboard
    Logitech wireless K800
    Mouse
    Logitech MX Master 3
    Internet Speed
    1 Gb/s Download and 35 Mb/s Upload
    Browser
    Internet Explorer 11
    Antivirus
    Malwarebyte Anti-Malware Premium
    Other Info
    Logitech Z625 speaker system,
    Logitech BRIO 4K Pro webcam,
    HP Color LaserJet Pro MFP M477fdn,
    APC SMART-UPS RT 1000 XL - SURT1000XLI,
    Galaxy S23 Plus phone
Not clear as to what option one is?
Which partition do you mean, the "C" drive, or another?
Thanks

Hello Boomer, :)

He's referring to using the OPTION ONE section on the first page of this tutorial.

The "Lock Drive" context menu can be used on any drive that you have previously turned on BitLocker for to encrypt it.

:thumbsup:
 

My Computer

System One

  • OS
    Windows 10 Pro 64bit
    Computer type
    Laptop
    System Manufacturer/Model
    Toshiba Satellite P50t
    CPU
    Intel i7-4700MQ @ 2.40Ghz
    Memory
    8.00GB
    Graphics Card(s)
    GeForce GT745M
    Sound Card
    Realtek Integrated chip
    Monitor(s) Displays
    Generic LCD
    Screen Resolution
    1920x1080
    Hard Drives
    Toshiba MQ01ABD100H (it's a Hybrid) One TB with 8GB integrated SSD
    PSU
    none
    Case
    n/a
    Cooling
    n/a
    Keyboard
    integrated_Backlit
    Mouse
    m/a
    Internet Speed
    Full Speed Fibre
    Browser
    IE/Firefox/Chrome
    Antivirus
    Windows Defender
@Brink Pls sir can you help me. I used to have the lock icon to unlock following your instructions, well I haven't used that drive in awhile and so I went to it to access some files I needed for resume and the lock icon is gone. I thought maybe avg pc tune up deleted the keys, so I put the files back in windows system32 unlocked the vbs file and merged the .reg file and nothing happened. I put it on desktop and c: and tried it and nothing. What gives? I can still go to control panel security and access it there, but too much time and can't lock back. I'm running windows 7 ultimate. Thanks..
 

My Computer

System One

  • OS
    win 7 ultimate

My Computer

System One

  • OS
    64-bit Windows 10
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Custom self built
    CPU
    Intel i7-8700K OC'd to 5 GHz
    Motherboard
    ASUS ROG Maximus XI Formula Z390
    Memory
    64 GB (4x16GB) G.SKILL TridentZ RGB DDR4 3600 MHz (F4-3600C18D-32GTZR)
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING
    Sound Card
    Integrated Digital Audio (S/PDIF)
    Monitor(s) Displays
    2 x Samsung Odyssey G7 27"
    Screen Resolution
    2560x1440
    Hard Drives
    1TB Samsung 990 PRO M.2,
    4TB Samsung 990 PRO PRO M.2,
    8TB WD MyCloudEX2Ultra NAS
    PSU
    OCZ Series Gold OCZZ1000M 1000W
    Case
    Thermaltake Core P3
    Cooling
    Corsair Hydro H115i
    Keyboard
    Logitech wireless K800
    Mouse
    Logitech MX Master 3
    Internet Speed
    1 Gb/s Download and 35 Mb/s Upload
    Browser
    Internet Explorer 11
    Antivirus
    Malwarebyte Anti-Malware Premium
    Other Info
    Logitech Z625 speaker system,
    Logitech BRIO 4K Pro webcam,
    HP Color LaserJet Pro MFP M477fdn,
    APC SMART-UPS RT 1000 XL - SURT1000XLI,
    Galaxy S23 Plus phone
Yes and it has, This script used to work fine, but like I said I haven't accessed this drive in some time, and noticed last night the lock was gone. I retried the fix and it's not working.. I can go to control panel security and access bit locker there. Just no icons through explorer no options to lock or unlock
 

My Computer

System One

  • OS
    win 7 ultimate
Does the drive itself have the grey lock on it like in the example screenshot at the top of the tutorial?
 

My Computer

System One

  • OS
    64-bit Windows 10
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Custom self built
    CPU
    Intel i7-8700K OC'd to 5 GHz
    Motherboard
    ASUS ROG Maximus XI Formula Z390
    Memory
    64 GB (4x16GB) G.SKILL TridentZ RGB DDR4 3600 MHz (F4-3600C18D-32GTZR)
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING
    Sound Card
    Integrated Digital Audio (S/PDIF)
    Monitor(s) Displays
    2 x Samsung Odyssey G7 27"
    Screen Resolution
    2560x1440
    Hard Drives
    1TB Samsung 990 PRO M.2,
    4TB Samsung 990 PRO PRO M.2,
    8TB WD MyCloudEX2Ultra NAS
    PSU
    OCZ Series Gold OCZZ1000M 1000W
    Case
    Thermaltake Core P3
    Cooling
    Corsair Hydro H115i
    Keyboard
    Logitech wireless K800
    Mouse
    Logitech MX Master 3
    Internet Speed
    1 Gb/s Download and 35 Mb/s Upload
    Browser
    Internet Explorer 11
    Antivirus
    Malwarebyte Anti-Malware Premium
    Other Info
    Logitech Z625 speaker system,
    Logitech BRIO 4K Pro webcam,
    HP Color LaserJet Pro MFP M477fdn,
    APC SMART-UPS RT 1000 XL - SURT1000XLI,
    Galaxy S23 Plus phone
Nope only when I got to control panel security bitlocker manage put pass word in and it shows my files. Nothing from explorer, nothing from my computer, no locks no symbols.

Edit: I used to.... I'm wondering if avg pc tune up did something, but yet again the scripts didn't work when i retried :(
 

My Computer

System One

  • OS
    win 7 ultimate
In that case, it sounds like the drive is not encrypted by BitLocker.

You might see if you are able to decrypt and encrypt it again in BitLocker Manager to sort this.
 

My Computer

System One

  • OS
    64-bit Windows 10
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Custom self built
    CPU
    Intel i7-8700K OC'd to 5 GHz
    Motherboard
    ASUS ROG Maximus XI Formula Z390
    Memory
    64 GB (4x16GB) G.SKILL TridentZ RGB DDR4 3600 MHz (F4-3600C18D-32GTZR)
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING
    Sound Card
    Integrated Digital Audio (S/PDIF)
    Monitor(s) Displays
    2 x Samsung Odyssey G7 27"
    Screen Resolution
    2560x1440
    Hard Drives
    1TB Samsung 990 PRO M.2,
    4TB Samsung 990 PRO PRO M.2,
    8TB WD MyCloudEX2Ultra NAS
    PSU
    OCZ Series Gold OCZZ1000M 1000W
    Case
    Thermaltake Core P3
    Cooling
    Corsair Hydro H115i
    Keyboard
    Logitech wireless K800
    Mouse
    Logitech MX Master 3
    Internet Speed
    1 Gb/s Download and 35 Mb/s Upload
    Browser
    Internet Explorer 11
    Antivirus
    Malwarebyte Anti-Malware Premium
    Other Info
    Logitech Z625 speaker system,
    Logitech BRIO 4K Pro webcam,
    HP Color LaserJet Pro MFP M477fdn,
    APC SMART-UPS RT 1000 XL - SURT1000XLI,
    Galaxy S23 Plus phone
It was encrypted, like I said everything was working fine. I just noticed the lock was gone yesterday. I didn't notice it lately because i haven't needed anything off that drive. I can still go to bitlocker settings and put my password in and open my files. It's just not listed in explorer or my computer like it used to be..
 

My Computer

System One

  • OS
    win 7 ultimate
I figured it out on my own.. AVG pc tune up when in performance mode disables all that stylish looks, some how in the process it also removes the context menu for bitlocker on the drives. For anyone using avg pc tune up and your state is performance/turbo state and you don't have the context menu, switch back to standard mode. Hope this helps someone.
 

My Computer

System One

  • OS
    win 7 ultimate
Interesting. Thank you for posting back with your findings. :)
 

My Computer

System One

  • OS
    64-bit Windows 10
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Custom self built
    CPU
    Intel i7-8700K OC'd to 5 GHz
    Motherboard
    ASUS ROG Maximus XI Formula Z390
    Memory
    64 GB (4x16GB) G.SKILL TridentZ RGB DDR4 3600 MHz (F4-3600C18D-32GTZR)
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING
    Sound Card
    Integrated Digital Audio (S/PDIF)
    Monitor(s) Displays
    2 x Samsung Odyssey G7 27"
    Screen Resolution
    2560x1440
    Hard Drives
    1TB Samsung 990 PRO M.2,
    4TB Samsung 990 PRO PRO M.2,
    8TB WD MyCloudEX2Ultra NAS
    PSU
    OCZ Series Gold OCZZ1000M 1000W
    Case
    Thermaltake Core P3
    Cooling
    Corsair Hydro H115i
    Keyboard
    Logitech wireless K800
    Mouse
    Logitech MX Master 3
    Internet Speed
    1 Gb/s Download and 35 Mb/s Upload
    Browser
    Internet Explorer 11
    Antivirus
    Malwarebyte Anti-Malware Premium
    Other Info
    Logitech Z625 speaker system,
    Logitech BRIO 4K Pro webcam,
    HP Color LaserJet Pro MFP M477fdn,
    APC SMART-UPS RT 1000 XL - SURT1000XLI,
    Galaxy S23 Plus phone
Thanks for the utility. Works ok, but found an issue. If I unlock a drive, the "Lock drive" option works fine. But if I lock it and then unlock the drive again the "Lock drive" option doesn't show up, and instead the option still says "Unlock drive". Clicking on that or the drive letter in Explorer gives a message that says the drive is already unlocked. The only way to access the drive is to select "Open in new window". A reboot gets everything back to good, but that 2nd toggle isn't working correctly. I'm on Windows 10.
 

My Computer

System One

  • OS
    Windows 10
    Computer type
    PC/Desktop
Last edited:

My Computer

System One

  • OS
    64-bit Windows 10
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Custom self built
    CPU
    Intel i7-8700K OC'd to 5 GHz
    Motherboard
    ASUS ROG Maximus XI Formula Z390
    Memory
    64 GB (4x16GB) G.SKILL TridentZ RGB DDR4 3600 MHz (F4-3600C18D-32GTZR)
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING
    Sound Card
    Integrated Digital Audio (S/PDIF)
    Monitor(s) Displays
    2 x Samsung Odyssey G7 27"
    Screen Resolution
    2560x1440
    Hard Drives
    1TB Samsung 990 PRO M.2,
    4TB Samsung 990 PRO PRO M.2,
    8TB WD MyCloudEX2Ultra NAS
    PSU
    OCZ Series Gold OCZZ1000M 1000W
    Case
    Thermaltake Core P3
    Cooling
    Corsair Hydro H115i
    Keyboard
    Logitech wireless K800
    Mouse
    Logitech MX Master 3
    Internet Speed
    1 Gb/s Download and 35 Mb/s Upload
    Browser
    Internet Explorer 11
    Antivirus
    Malwarebyte Anti-Malware Premium
    Other Info
    Logitech Z625 speaker system,
    Logitech BRIO 4K Pro webcam,
    HP Color LaserJet Pro MFP M477fdn,
    APC SMART-UPS RT 1000 XL - SURT1000XLI,
    Galaxy S23 Plus phone
Hello bombadil, and welcome to Eight Forums. :)

Here's the tutorial below for Windows 10, but it's the same.

Lock Drive - Add to Context Menu of BitLocker Drives in Windows 10 - Windows 10 Forums

If you like, replace the lock-bde.vbs file from the tutorial in your System32 folder with the one below to see if it may work better for you. I removed the -ForceDismount switch from it.

View attachment 68247

Thanks for the quick response. I'm encrypting some drives at the moment so have to wait a day or so to test out the new script. I'll let you know how it goes. Appreciate your help.
 

My Computer

System One

  • OS
    Windows 10
    Computer type
    PC/Desktop
Back
Top