Windows 10: Cannot Unlock Files on External USB Drive - Bitlocker is off

I have data on an Seagate external usb drive containing files saved from my work computer. Bitlocker is not enabled on the external drive nor the onboard drives.


I've plugged it into my Dell Inspirion 15 7000 gaming laptop. I can open/transfer most folders and files. However, when I try to open or transfer MyDocuments/MyPictures files and folders, I get "administrator permission required" and "access denied" once I click continue. MyDocuments


I've tried taking ownership and change access permissions using my regular laptop login account, created a new local account regardless of whether I attempt to change advanced security, the folders and files are still locked.


Security properties show "Everyone," the "local" and "adminstrators" accounts have full permissions.


I tried to change ownership again using Advanced Security Settings> Select Users and Groups > Advanced Change owner and FIND NOW shows a list of accounts ranging from administrator(s) to Power User through Everyone, SYSTEM and WDAGUtilityAccount.


I'm stumped. Any ideas?


Thanks.


Bob

:)

 

File back up to bitlockered external drive

Thanks John.

By trial and error the solution is,

• Set the file back up to the desired external USB drive, Back up using file history.
• Run backup to completion.
• Dismount, (Remove) the drive used.
• Remount (Plug in) the drive used for the file back up (Steps 1&2) and encrypt using Bitlocker.

Note you can only encrypt drives using some versions of Windows (Pro for eg not Home)

• Once the external drive has been encrypted dismount.
• Remount the drive, go to the file back up option, Open, Settings, Backup,
  Back up using file history.
• The drive should now still be visible and has been encrypted.
• Accessing the drive will be dependant on how it was set up in Bitlocker,
  Open with this PC, password, pin code etc.
• Repeat file back up as in the first two steps.

Hope this helps someone else.

 

HELP: Automatic BitLocker Unlock.

Thank you sir, ill try your solution.

Windows Auto unlock ONLY works in case you have Bitlocker on your system drive, because if your system drive is not encrypted auto unlocking other drives means loss of security.
But in my case my system drive is Encrypted with hardware encryption that i password unlock during boot. So auto unlocking Bitlocker drives will do fine for me.

 

HELP: Automatic BitLocker Unlock.

more clear
0down voteaccepted
I managed to figure out how to fix this. It doesn't use the native auto-unlock function like I was hoping (rather a script that unlocks using a .BEK file, as I mentioned) but it seems to work just as well.

First, you need to create a .BEK file that can unlock the disk. This is the command I used:

manage-bde -protectors -add d: -rk c:\

Substitute d: with whichever drive you want to auto-unlock. The output will look something like this (take note of the "external key file name"):

BitLocker Drive Encryption: Configuration Tool version 10.0.10011
Copyright (C) 2013 Microsoft Corporation. All rights reserved.

Key Protectors Added:

Saved to directory c:\

External Key:
ID: {9DDF4900-5E08-479A-8C4C-6ADE2DA00551}
External Key File Name:
9DDF4900-5E08-479A-8C4C-6ADE2DA00551.BEK

Now you need to create the script to unlock the drive. Just create a batch file in the root directory with the following line:

manage-bde -unlock d: -rk C:\[external key filename]

Again, replace d: with the correct drive letter. Replace [external key filename] with the filename you got before.

Finally, you need to tell Windows to run this script at startup, before you log in. (Or at least I needed it to run then, because that's where my desktop, etc. are stored.) Here's how you do that:

• Press Win+R and enter gpedit.msc. (This is only in Pro, but so is BitLocker, so that's not an issue here.)
  
  
• On the left, navigate to Computer Configuration > Windows Settings > Scripts (Startup/Shutdown)
  
  
• Double-click "Startup" on the right
  
  
• Click "Add..." and select the batch file you created before.
  
  
• Click OK and exit Group Policy Editor.
  

Now you can reboot the computer to test it. You should see your drive automatically unlocked