How to Start/Stop BitLocker Drive Encryption Service
Service name: BDESVC
Display name: BitLocker Drive Encryption Service
Description:
BDESVC hosts the BitLocker Drive Encryption service. BitLocker Drive Encryption provides secure startup for the operating system, as
well as full volume encryption for OS, fixed or removable volumes. This service allows BitLocker to prompt users for various actions
related to their volumes when mounted, and unlocks volumes automatically without user interaction. Additionally, it stores recovery
information to Active Directory, if available, and, if necessary, ensures the most recent recovery certificates are used.
Stopping or disabling the service would prevent users from leveraging this functionality.
Path to executable:
C:\WINDOWS\System32\svchost.exe -k netsvcs -p
CMD:
This method shows you how to Start/Stop BitLocker Drive Encryption Service from Command Prompt
Perform the following steps:
Please go to Start and click on the Type here to search
Type cmd, right click on cmd icon under the Programs and click on Run as administrator
Please confirm User Account Control pop-up
Please select, right and copy a registry key from below, then right click on command prompt window, select Paste and press Enter
To Start BitLocker Drive Encryption service:
net start BDESVC
sc start BDESVC
Note: You can’t start a service if Startup type is on Disabled.
To Stop BitLocker Drive Encryption service:
net stop BDESVC
sc stop BDESVC
To change Startup type:
Automatic:
REG add "HKLM\SYSTEM\CurrentControlSet\PerfHost\BDESVC" /v Start /t REG_DWORD /d 2 /f
sc config BDESVC start= auto
Manual:
REG add "HKLM\SYSTEM\CurrentControlSet\services\BDESVC" /v Start /t REG_DWORD /d 3 /f
sc config BDESVC start= demand
Disabled:
REG add "HKLM\SYSTEM\CurrentControlSet\services\BDESVC" /v Start /t REG_DWORD /d 4 /f
sc config BDESVC start= disabled
Automatic (Delayed Start):
REG add "HKLM\SYSTEM\CurrentControlSet\services\BDESVC" /v Start /t REG_DWORD /d 2 /f
sc config BDESVC start= delayed-auto
Note: When you change to Automatic (Delayed Start) a new key DelayedAutostart is created with value 1.
REG add "HKLM\SYSTEM\CurrentControlSet\services\BDESVC" /v DelayedAutostart /t REG_DWORD /d 1 /f
When you change to Automatic from Automatic (Delayed Start), DelayedAutostart change value to 0.
REG add "HKLM\SYSTEM\CurrentControlSet\services\BDESVC" /v DelayedAutostart /t REG_DWORD /d 0 /f
