In the Windows Group Policy Editor, select
Right-click Control use of BitLocker on removable
drives and select Edit.
Under Options, deselect Allow users to
apply BitLocker protection on removable data drives.
Under Options, select Allow users to
suspend and decrypt BitLocker protection on removable data
- Click OK.
BitLocker To Go encryption is deactivated on the endpoints. Users cannot encrypt new volumes with
BitLocker To Go anymore. Volumes and removable media that are already encrypted
with BitLocker To Go remain accessible.