batcmd.com Windows 10 Services

BitLocker Drive Encryption Service - Windows 10 Service

BDESVC hosts the BitLocker Drive Encryption service. BitLocker Drive Encryption provides secure startup for the operating system, as well as full volume encryption for OS, fixed or removable volumes. This service allows BitLocker to prompt users for various actions related to their volumes when mounted, and unlocks volumes automatically without user interaction. Additionally, it stores recovery information to Active Directory, if available, and, if necessary, ensures the most recent recovery certificates are used. Stopping or disabling the service would prevent users from leveraging this functionality.

This service also exists in Windows 11 and 8.

Startup Type

Windows 10 version Home Pro Education Enterprise
1507 Manual Manual Manual Manual
1511 Manual Manual Manual Manual
1607 Manual Manual Manual Manual
1703 Manual Manual Manual Manual
1709 Manual Manual Manual Manual
1803 Manual Manual Manual Manual
1809 Manual Manual Manual Manual
1903 Manual Manual Manual Manual
1909 Manual Manual Manual Manual
2004 Manual Manual Manual Manual
20H2 Manual Manual Manual Manual
21H1 Manual Manual Manual Manual
21H2 Manual Manual Manual Manual
22H2 Manual Manual Manual Manual

Default Properties

Display name:BitLocker Drive Encryption Service
Service name:BDESVC
Type:share
Path:%WinDir%\System32\svchost.exe -k netsvcs -p
File:%WinDir%\System32\bdesvc.dll
Error control:normal
Object:localSystem
Privileges:
  • SeChangeNotifyPrivilege
  • SeImpersonatePrivilege
  • SeTcbPrivilege
  • SeAssignPrimaryTokenPrivilege
  • SeIncreaseQuotaPrivilege
  • SeSystemEnvironmentPrivilege
  • SeBackupPrivilege
  • SeRestorePrivilege

Default Behavior

The BitLocker Drive Encryption Service is running as localSystem in a shared process of svchost.exe. Other services might run in the same process. If BitLocker Drive Encryption Service fails to start, the error is logged. Windows 10 startup proceeds, but a message box is displayed informing you that the BDESVC service has failed to start.

Restore Default Startup Type of BitLocker Drive Encryption Service

Automated Restore

1. Select your Windows 10 edition and release, and then click on the Download button below.

2. Save the RestoreBitLockerDriveEncryptionServiceWindows10.bat file to any folder on your hard drive.

3. Right-click the downloaded batch file and select Run as administrator.

4. Restart the computer to save changes.

Note. Make sure that the bdesvc.dll file exists in the %WinDir%\System32 folder. If this file is missing you can try to restore it from your Windows 10 installation media.

Yea, though I walk through the valley of the shadow of death, I will fear no evil: for thou art with me; thy rod and thy staff they comfort me.