BitLocker - Removable Media & Switch User

[CHiLL]

I'm currently testing BitLocker encryption on removable media and so far so good. However, there's one niggle that's annoying me.

 

If a member of staff inserts their encrypted drive and enters the password - the drive unlocks and it can be used.

If that member of staff then locks their PC with the USB drive still inserted and unlocked...and then another member of staff uses that machine...the USB drive is visible and unlocked for them too.

 

Now, I know this is no different than having an unencrypted drive connected, but I just thought I'd check. I can forsee that being something that they'd complain about.

 

Is there a way of getting the drive to lock if the user locks their machine or the user is switched?

[skell]

Any updates to this? We're running into the same issue.

[Steve21]

You can do a scheduled task that fires on lock etc and have it run "manage-bde -lock d: -forcedismount" (insert other letters as required )

 

Steve

[skell]

Do you know if that would cause problems if files are open on from the drive at the time? I assume it wouldn't unless they were going to be saved again.