BitLocker Drive Encryption Service

 

General Information

None at this time

Windows 8

Default Description

BDESVC hosts the BitLocker Drive Encryption service. BitLocker Drive Encryption provides secure startup for the operating system, as well as full volume encryption for OS, fixed or removable volumes. This service allows BitLocker to prompt users for various actions related to their volumes when mounted, and unlocks volumes automatically without user interaction. Additionally, it stores recovery information to Active Directory, if available, and, if necessary, ensures the most recent recovery certificates are used. Stopping or disabling the service would prevent users from leveraging this functionality.

Additional Information

None at this time.

Default Startup Type

OS SP0
Windows 8 x86 Manual (Trigger Start)
Windows 8 x64 Manual (Trigger Start)
Windows 8 Pro x86 Manual (Trigger Start)
Windows 8 Pro x64 Manual (Trigger Start)
Windows 8 Enterprise x86 Manual (Trigger Start)
Windows 8 Enterprise x64 Manual (Trigger Start)

Service Names

Service Name (registry): BDESVC
Display Name: BitLocker Drive Encryption Service

Default Path and Command Line Options

C:\Windows\system32\svchost.exe -k netsvcs

Log On As

Account: Local System account

Dependencies

Note: No dependencies are listed for any service in the WDP build I used to draft this information.

Windows 7

Default Description

BDESVC hosts the BitLocker Drive Encryption service. BitLocker Drive Encryption provides secure startup for the operating system, as well as full volume encryption for OS, fixed or removable volumes. This service allows BitLocker to prompt users for various actions related to their volumes when mounted, and unlocks volumes automatically without user interaction. Additionally, it stores recovery information to Active Directory, if available, and, if necessary, ensures the most recent recovery certificates are used. Stopping or disabling the service would prevent users from leveraging this functionality.

Additional Information

None at this time.

Default Startup Type

OS SP0 SP1
Windows 7 Starter Manual Manual
Windows 7 Home Basic Manual Manual
Windows 7 Home Premium Manual Manual
Windows 7 Professional Manual Manual
Windows 7 Ultimate Manual Manual
Windows 7 Enterprise Manual Manual

Service Names

Service Name (registry): BDESVC
Display Name: BitLocker Drive Encryption Service

Default Path and Command Line Options

C:\Windows\System32\svchost.exe -k netsvcs

Log On As

Account: Local System account

Dependencies

What service BitLocker Drive Encryption Service needs to function properly:

  • None (S, HB, HP, P, U, E)

What other service require BitLocker Drive Encryption Service to function properly:

  • None (S, HB, HP, P, U, E)

Additional Reading

BitLocker Drive Encryption: http://en.wikipedia.org/wiki/BitLocker_Drive_Encryption