Skip to the main content
Building Blocks Benjamin Athawes / field notes , home

Field note / 17 March 2013

When BitLocker encrypts only part of a volume

Encryption can turn a recoverable disk problem into an unrecoverable one. The backup comes first.

A partial encryption state is a warning, not a routine status. It can mean the process was interrupted, the volume changed underneath it or the protection was applied to a disk that was already in an unstable condition. The visible symptom may be a drive that mounts but behaves inconsistently.

Before changing anything, preserve a copy of the data and the recovery material. If the volume is already damaged, a repair attempt may finish the job of making it unreadable. The order of operations matters more than the tool selected.

Protect the recovery path

Record the recovery password and key protector details in the approved secret store. Confirm that the account performing the work can access them. Then test whether the volume can be unlocked after a controlled restart before attempting a decryption or repair cycle.

If the data matters, image the disk first. Work from the image and leave the original untouched until the recovery has succeeded. If the data is already backed up and the goal is simply to rebuild the machine, a clean reinstall is often safer than an extended repair.

The short list

Checks worth running

  • Confirm that the recovery key is available before touching the disk.
  • Take a full image when the data has not been independently backed up.
  • Test decryption in a controlled environment before applying it broadly.

BitLocker is a strong control until recovery becomes an afterthought. The lesson from a partial encryption event is to invest in the recovery path before the disk gives you no choice.

Outside reading

Reference shelf

Official documentation and independent community reading for the subjects in this note.

  1. Microsoft Learn: BitLocker overview (opens in a new tab)How BitLocker protects volumes and what recovery planning needs to cover.
  2. Microsoft Learn: Windows Server documentation (opens in a new tab)Current guidance for Windows Server roles, networking, storage and management.
  3. Microsoft Support (opens in a new tab)Support articles, troubleshooting steps and product help from Microsoft.
  4. Microsoft Download Center (opens in a new tab)Official downloads for Microsoft tools, updates and supporting packages.
  5. Microsoft Learn Q&A (opens in a new tab)A community question and answer space hosted by Microsoft.
  6. Microsoft Tech Community (opens in a new tab)Community discussion, product announcements and practical posts from Microsoft teams.
  7. Microsoft Security blog (opens in a new tab)Microsoft guidance on security research, response and platform protection.
  8. Microsoft Security Response Center (opens in a new tab)Security advisories, update guidance and vulnerability response information.
  9. Microsoft Learn: SharePoint documentation (opens in a new tab)The starting point for current SharePoint administration, development and hybrid guidance.
  10. SharePoint Stack Exchange (opens in a new tab)An independent question and answer community for SharePoint practitioners.
  11. SharePoint community on Reddit (opens in a new tab)An independent discussion space for administrators, developers and users.
  12. Microsoft Lifecycle: product support dates (opens in a new tab)Official support lifecycle information for Microsoft products and versions.
  13. Microsoft Learn: SharePoint administration (opens in a new tab)Operational guidance for service settings, site management and the modern admin experience.
  14. Microsoft Learn: SharePoint search (opens in a new tab)Documentation for search architecture, crawling and result management.
  15. Microsoft Learn: PowerShell documentation (opens in a new tab)Language reference, cmdlet documentation and guidance for repeatable automation.