Deactivate BitLocker To Go encryption

  1. In the Windows Group Policy Editor, select Local Computer Policy > Computer Configuration > Administrative Templates > Windows Components > BitLocker Drive Encryption> Removable Data Drives.
  2. Right-click Control use of BitLocker on removable drives and select Edit.
  3. Select Enabled.
  4. Under Options, deselect Allow users to apply BitLocker protection on removable data drives.
  5. Under Options, select Allow users to suspend and decrypt BitLocker protection on removable data drives.
  6. Click OK.

BitLocker To Go encryption is deactivated on the endpoints. Users cannot encrypt new volumes with BitLocker To Go anymore. Volumes and removable media that are already encrypted with BitLocker To Go remain accessible.