The BitLocker Drive Encryption Service (BDESVC) allows BitLocker to prompt users for various actions when they access their hard disk drives and it supports unlocking BitLocker-protected drives automatically without user interaction. Additionally, the service supports storing recovery information to Active Directory Domain Services, if available. If necessary, it ensures that the most recent recovery certificates are used. Stopping or disabling the service prevents users from using these features of BitLocker.

This service is installed by default and its startup type is Manual. When the BitLocker Drive Encryption Service is started in its default configuration, it logs on by using the Local System account.

This service is not dependent on any other system service, nor is any service dependent on it.