Determine which version of Microsoft Windows is in use. Press the Windows search button and type: powershell
Choose the PowerShell application.
In PowerShell type: Type: [System.Environment]::OSVersion.Version
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgTYOWA3CXu5s8x7rvrEYClmMsSFYo43T6lgElD9YmYiYSITHi5_9s6rHdOodkcRtIlnST5Ji6M2JQ-pH3Ec0isx2ZihJCRS-iES6M0cBRw7GyuTbCL0gl04mx4C0c9DxCrK0ol/s400/a+get+version.jpg)
Open Control Panel: right-click on Windows button, choose Control Panel
In Control Panel upper-right search box, type: group policy
Choose: Edit group policy
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjTtbc7Rvf3YP7l6rsETraWGDETeIaAVxAkY5M0tryPWPbn-bebLmz1BthMP7a3x9RhQuJKq4VT6u6hrQUGScwYQCxe49F-gCthYb7nlqeiTfnV3BsSpPGPk1s_9POvozt67pjL/s400/a1.jpg)
For those who watch the Windows error log, the BitLocker Event IDs are described here. The Event IDs are 24577 - 24621.
In the Local Group Policy Editor, navigate to Navigate to: Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption
To change the default drive encryption of 128-bit to 256-bit, edit the entry: Choose drive encryption method and cipher strength
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhoc4Rh51bUkWzVyah7hyphenhyphenRZroHGozImbdvYgQntLaCqPwrzMIs36eTbiUp1WEUJT8TyIQEYcCVMIMhXQClJEnO-Loii32awzPwOpsJgnrkUij9C_Hukpk8AWwNakZSTYfHVSj4d/s400/b.jpg)
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhsZ6bkrQD8eJZDc9htG-JrXnYZzoIxlChk1NONswn6aiyOQ7X3_HW-nDflknuJ5nfDhDTzK80iM5fyfWAc3b-VYKj_ppj4WPDiiSu8cxTlGK8xzhyphenhyphenZTO8-WKwXimFX2OdKH02Y/s400/c.jpg)
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEicc7sjD26Fh2NMrmMQPFngMVR_Z1zsCEYph2DCP4W1zE2-QPw2VBtxBwshc1nBOCOmBrJS31iMLsHLTSbpiHFre-QTUSaa65RRW263wvDS9gkp-SdFd6_UCSul5Wv_zH8Jkpdn/s400/d.jpg)
To turn on drive encryption, go to Windows Explorer and right-click on the drive. Select Turn on BitLocker
The drive will be set up for encryption.
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgVyr0O6kXhcGmLt_y7dgbCuw72vxzUhtO1ortf0jqpMcx63njvW5sXp_JuLpQ0KRo5gqCBv_2o06Oh-jKivD54jysJnwfOAGddHB-jG6d-mWB6QlZynr-b3kBtdrH2gLfHRF2z/s400/g+turn+on+1.jpg)
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEidfiY5081hdS8tf8AWxOBVC_WycbWpA0ECZTRoF2U4J2xpwS27i9xUnKZt7tOrvxUY2ysMvlMk-o4yUX24mcl2VX5d6W8UnFUlwP2OStIAHFnC299h1IqjcSxBmK1GwzeO5myH/s400/g+turn+on+2.jpg)
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjlribFu4FNP2Sk3hAj3RAlAnO08hY5UJTcxY5tY6QNp25bwDPNpDbAUlGq6IODbz-9lM_KB3jrUXRQACFYzRbYldAlDwHMrY1g9h2TxfwB2Yxi956WNso2NsiueRQJy1NF28FF/s400/h.jpg)
Choose a password.
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhz7KCyYduQvMTi6N8hNDLexd3mC38SNB6CRufy4hDr3JuEZ0G2uhMrSTVXsnRHvWYEInX6s5aSurFO6ogkvnAN_9846tYtGWs2u3dbh58iFN9uw0q1Uh93w0aUTLpZNbMDgOZl/s400/i+pw.jpg)
It may be good to print a recovery key. Place the printed key offsite in a secure location.
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhO9zlc033W1mE9jU52Ud6_-3UPbqlhXL97YpAlsBbimow4X6iEzRXF6GE18WjqO3y1PYVddJjq-sOdfzZlzFvA7FAhVExbTinjtTWuC54wDAASwrKWARaelOLFHv0vNFLcxFyB/s400/j+print+recovery+key.jpg)
The process of encrypting the drive will begin. Existing data is maintained, so the encryption process may take a day or more.
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhDdHYBgwtMkhkmAc9zQM3uLnDOZJPB6tYrK4Wpboi_DVadQXSvO3Sl4uCeI3u0foKWFqAlRDBDxCxIZpuv5r4mNIKrsViEdkK4AvmFRV28t7-hYDgAtk6O9o9Bcx23wmSNPGhc/s400/k+strt+encry.jpg)
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg38_dUbUNG19OlEojyklq0sUepUbPnKSShemAs76AWjZQU6cccoiOoCiBGkheIPqPjpPlRRiHyy-EAav91E2uTtObnaecqzUU8w3HS4a1Z1BWSxLVDBxAy6tWc3TwJtH4f_9Ax/s400/l+encry+0.jpg)
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiW4XPhTut0J2nbXOZbLyQ2l2O6esB56jx5Mf6RAqgFId7zUH6c4_jR01tPcSscaDB3NRed9NRuVlBdDI-TsIXBtTwukT9BMlpD1TQDpJ_caW5Gkj_TGKzg6FzKwYoUJEdqaadV/s400/l+encry+93.jpg)
After the drive is encrypted, test unlocking the drive. This is a good time to restart the PC, then go to Windows Explorer and note the yellow icon on the drive letter. Right-click the drive and choose: Unlock Drive...
Enter the drive password.
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiejnOS187tZ6Pijk99V3BuGQG2iK7FZrTfsmgk-Qr-TVHI8Z_n9w1nVCYVraH2jS_58LsbzB3Ij5vFleojlj0CLQ2eRF1asSsEep_F2ewTGK0ULQDJ3Czb-rGKSTwAWJaOsjJs/s400/n+enter+key.jpg)
This shows Computer Management with the drive designated as "BitLocker Encrypted".
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhyRNy0sBpOUUu-m8yUEouuizmp6w5D8ITOHKNHvnYTB4YlsUQzIZObNnNjx_Yy2Ifo-A4zfiFZ1ydJcj-2EqyT7FQ_jaXeKamAoc7xmzl0f8hSnOWCJyyxvjzvQSmYQyJ-gGWZ/s400/o+computer+management.jpg)