Instead of NT AUTHORITY\Authenticated Users, the security descriptor uses NT AUTHORITY\INTERACTIVE. The security descriptor of the BitLocker Drive Encryption service (BDESvc) has an incorrect entry.
You receive this message on any computer that runs Windows 10 version 1709 or version 1607, or Windows 11, when you use any USB drive. The Starting encryption page displays the message "Access is denied." On the Are you ready to encrypt this drive? page, select Start encrypting. On the Choose how you want to unlock this drive page, select Use a password to unlock the drive.įollow the instructions on the page to enter your password. In Windows Explorer, right-click the USB drive and select Turn on BitLocker. You try to encrypt a USB drive by following these steps: You have a computer that is running Windows 10, version 1709 or version 1607, or Windows 11. "Access is denied" message when you try to encrypt removable drives HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVEĮxit Registry Editor, and turn on BitLocker Drive Encryption again. Start Registry Editor, and navigate to the following subkey: To resolve this issue, follow these steps: Before you modify it, back up the registry for restoration in case problems occur. Serious problems might occur if you modify the registry incorrectly.
Follow the steps in this section carefully.