Can't Encrypt Additional Partition with BitLocker


  1. Posts : 10
    Windows 7 Ultimate x64
       #1

    Can't Encrypt Additional Partition with BitLocker


    My setup: W7 Ultimate x64 on ThinkPad T510. 1HD, two partitions (C and D).

    I just reinstalled my system and encrypted C; however, there is absolutely no option to encrypt D. I've tried accessing the drive from admin account and still nothing. When I open BitLocker management, it only lists partition C and not D.

    Here is some additional information that might or might not matter: I tried to restore my W7 from an Acronis image and it was unsuccessful. Tried it twice and during booting POST showed two different W7s installed, which was incorrect. When I finally installed W7 from scratch, the extra W7s were still appearing before startup and I had to use EasyBCD to remove them. Now when I am trying to backup partition C, Acronis says that my System Reserved Partition (SRP) is on partition D. My hunch is that Acronis messed up my drive D when I was trying to restore my C partition. Then when I did a fresh W7 install, the SRP incorrectly ended up in D and since SRP cannot be encrypted, that means that my entire drive D can’t be encrypted either.


    Can that really be the case? If so, what is the quickest solution? I am dreading about going through formatting my 750GB HD and installing W7 and encrypting it yet again. I read somewhere that you can use software like Acronis Disk Manager to move the SRP to drive C, but I am not sure how this will work because when I open the native winodws Disk Management, I don’t see SRP there. So I’m stuck and don’t want to format my HD if what I think is the problem is in fact not the problem.
      My Computer


  2. Posts : 116
    Vista HP, Vista Ultimate, XP Pro, Seven Ultimate x2
       #2

    Hello Excelsius.

    Typically, Windows 7 will create a 100 MB partition on the primary disk and will not be given a letter. This may not be large enough for Acronis Image, so you might want to make it larger and give it a letter prior to setting up Acronis. The issue is the reserved partition Window’s creates is at the beginning of the primary disk.
    If you don’t want to re-format and manually create the partition on your primary disk you should be able to create the system reserved partition at the end of the disk, assign it a letter, manually select it for Acronis (if you can) then remove the drive letter. You will have to make sure to mark this reserved partition as active.
    Warning:
    Changing the active boot partition will stop windows from booting up until you reform a boot repair in windows recovery environment from the installation disk
      My Computer


  3. Posts : 10
    Windows 7 Ultimate x64
    Thread Starter
       #3

    n0th1n9 said:
    Hello Excelsius.

    Typically, Windows 7 will create a 100 MB partition on the primary disk and will not be given a letter. This may not be large enough for Acronis Image, so you might want to make it larger and give it a letter prior to setting up Acronis. The issue is the reserved partition Window’s creates is at the beginning of the primary disk.
    If you don’t want to re-format and manually create the partition on your primary disk you should be able to create the system reserved partition at the end of the disk, assign it a letter, manually select it for Acronis (if you can) then remove the drive letter. You will have to make sure to mark this reserved partition as active.
    Warning:
    Changing the active boot partition will stop windows from booting up until you reform a boot repair in windows recovery environment from the installation disk
    I am not clear as to how I can do this. Right now I am unable to see where the SRP is. If I don't know where it is, how can I even delete it? Also, how can I create a new SRP at the end of the disk? In case there are no specific suggestions, can I as a last resort backup my C drive, wipe my HD, create 3 partitions (including a 200mb SRP) and then restore the C image into this newly formatted HD? The idea is then I can put it in my laptop, boot it, and then run Startup Recovery from Windows 7 DVD/USB, which will hopefull create a new system reserved partition in the 200mb manually created partition.
      My Computer


  4. Posts : 10
    Windows 7 Ultimate x64
    Thread Starter
       #4

    Ok, so I tried and few things and also read this guide: System Reserved : Create Using Disk Management I found out that I do NOT have a separate System Reserved Partition. After I chose to reveal hidden and protected files, sure enough I saw the boot folder and bootmgr in my D drive. The problem is much more specific now: I created a 200mb "System Reserved" partition by shrinking partition D. I also went through great deal of trouble getting access to these hidden system files so I could delete them. Unfortunately, when I do startup repair, Windows ALWAYS puts the boot files back in D and never does anything with the manually created 200mb SRP. At this point I don't know what else to do. The only thing I can think of is to format everything except partition C (since installing my setup was the most time consuming part) and try startup recovery again. The catch is that I have to move about 500GB of data and it's not going to be fun if that solution doesn't work either. I am open to alternate solutions.
      My Computer


  5. Posts : 116
    Vista HP, Vista Ultimate, XP Pro, Seven Ultimate x2
       #5

    Is it a primary partition and did you mark it as active? You don’t have to manually delete the boot files from D:. You just mark the new primary partition as active then reset your computer and perform a boot repair. That should be it.
      My Computer


  6. Posts : 10
    Windows 7 Ultimate x64
    Thread Starter
       #6

    Thank you, n0th, that did it! It’s been a long time since I have gotten a suggestion online that actually worked for something I couldn’t figure out. My boot files are now in SRP and I can now encrypt partition D with BitLocker. I’d like to give back to the community by writing a complete guide here because I haven’t seen a single guide that address this correctly.

    For those with this same problem, the first thing you need to do is go to your Disk Management (type this in your Start address bar and click on “Create and format hard disk partitions” in the search results). In there, you must see System Reserved as one of your partitions. If it’s not there, then it is likely in one of your other partitions (except C). Now that you know the problem, you can apply this guide:

    1. In Disk Management, right click on one of your partitions (except C), preferably the last one location on the HD that contains partition C, and select “Shrink Volume.”
    2. For the “amount of space to shrink” enter 200MB (this is better than the native 100MB if you’re using BitLocker). Press Shrink
    3. Right click on the newly created unallocated space and select “New simple volume”
    4. Specify the volume size of 200, then select “Do not assign a drive letter”
    5. Label the volume “System Reserved” and uncheck “Quick format.” Finish the process.
    6. Right click on the newly created System Reserved and select “Mark Partition as Active”
    7. Insert Windows 7 DVD or USB stick and make sure BIOS is set to boot from it
    8. Once you boot from W7 setup, select “Repair System” and then “Startup Repair”
    9. Once that’s complete, remove the USB/DVD and restart
    10. You’re done, but keep this in mind. Sometimes you need to run the repair three times before Windows can boot correctly, so don’t give up after it doesn’t work the first time. In fact, it probably won’t work after repairing just once.

    If you were successful, BitLocker encryption will now be available for the drive you had issues with. This leaves the most annoying part – deleting the boot files from your file partition. If you want to do this, follow the steps below:

    Enable the true Administrator account and log in. To enable:
    1. Start-->Type cmd. In the results right click on CMD and Run as administrator
    2. Type this command in CMD: net user administrator /active:yes

    When you log off, Administrator account will be there. Log into it and follow through the rest of the steps below.

    To delete the boot files, first make them visible:
    Go to the partition where you think your boot files are, go to Organize-->Folder Options-->View. Here check “Show hidden files…” and uncheck “Hide protected operating system files.” Click OK. The boot files will now be visible.

    To delete any of the boot files, you will need to right click on each file/folder and follow the steps below
    1. Properties-->Security-->Advanced-->Owner-->Edit-->Select Administrator-->Ok
    2. Properties-->Security-->Advanced-->Permissions-->Change Permissions-->Select Administrators, Check “Include inheritable…” and “Replace all child object…” (available only for folders)-->Ok
    3. Properties-->Security-->Edit-->Highlight Administrators and give Full Control-->Ok

    This is it. I’m not too happy about the time spent on this, but this was a good learning experience. This is why some people dislike Windows. I am waiting for that day when users won’t have to ever waste any time dealing with software issues. Maybe another decade or two.
      My Computer


  7. Posts : 116
    Vista HP, Vista Ultimate, XP Pro, Seven Ultimate x2
       #7

    Glad I could help.
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 00:20.
Find Us