Q. If I use Windows BitLocker Drive Encryption to protect a volume, is the content of any volumes mounted as folders under the protected volume also encrypted?

A. No. When you create a volume in Windows, you can assign it a drive letter, mount the volume as a folder in an existing volume as shown in the following diagram, or do both.

 As the diagram shows, when you view the D drive you see a folder called Virtuals. When you look in Virtuals, you see the image1, image2, and image3 folders as if they were part of the D drive when they are, in fact, stored on a separate volume, linked to from D.
If you encrypt the D drive using BitLocker, you’re performing volume-level encryption. Bitlocker encrypts the entire D volume but any volumes mounted as folders are still completely separate volumes and therefore are not encrypted, as the following diagram shows.

Please or Register to post comments.

IT/Dev Connections

Las Vegas
September 30th - October 4th

Paul ThurottYou'll have the opportunity to experience:
• The Microsoft
Technology Roadmap
• Office 365 Implementation
• Hyper-V Optimizing
• Windows 8 Deployment
and much more!

Come See Paul Thurrott & Rod Trent in Person!

Early Registration Now Open

Upcoming Training

Mastering System Center 2012

During over 6 hours of training you can join John Savill from your computer as he will walk you through the key components and capabilities of System Center 2012, what’s involved in using the components, and the benefit they can bring to your environment.

Register Now

Current Issue

May 2013 - The NameTranslate object is useful when you need to translate Active Directory object names between different formats, but it's awkward to use from PowerShell. Here's a PowerShell script that eliminates the awkwardness.

CURRENT ISSUE / ARCHIVE / SUBSCRIBE

Windows Forums

Get answers to questions, share tips, and engage with the Windows Community in our Forums.