Hi Guys, I'm running Win 7 Ultimate 64-bit. Concerning the BitLocker feature, I've run into 4 problems. Can anyone shed light on these? 1) Is there any way to make BitLocker act like a software firewall and let certain programs run even from an encrypted drive? I had ZoneAlarm and my anti-virus program on my main storage drive (D), and have this drive locked by default when someone other than me uses the computer. The problem is, since the OS is on C, and these programs are on locked D, my firewall and anti-virus do not automatically load into memory when my PC boots into Windows. Not a problem for me, since I can simply unlock the D drive, then run the programs manually. But a problem for other users. Is there any way around this? 2) I've found that the Add/Remove Programs feature thinks you have already uninstalled a program that it shows up as present in the "Uninstall or change a program" screen if that program is installed on a currently not available/locked encrypted drive. So it then asks you to uninstall the icon from this screen too, since it thinks the program is already gone! 3) The TPM management says I don't have a compatible TPM on my computer. I'm pretty sure this a feature at the motherboard hardware level (?) or at least the BIOS, and I have the latest BIOS for my mobo, and don't have this feature available anywhere. I want to also encrypt my OS drive (C) using BitLocker. Since I don't have TPM, BitLocker Help says I can use "A removable flash memory device, such as a USB flash drive...This option is only available if your system administrator has setup your network to allow the use of a startup key instead of the TPM." Does anyone know how to setup my PC/network so I can use the flash drive in this way? (I've just discovered you can't copy&paste from Windows Help - that sucks). 4) Because of the issue in 1) above, any shortcuts/QuickLaunch links to programs installed on D lose their icons, even after I have enabled the locked D drive. Is there a way to solve this issue? Thanks guys for any assistance :)

Are you still having problems, before I type up all the answers?Tanner --- This is posted as-is and has no warranty or guarantee ---

Bitlocker will act base on program behavier and action you could NOT put exception for Bitlocker but if you run program as Admin then Bitlocker won't show up in the program or you may try to right click on program and go to propertise ->compatibility tab and then chose always run as admin and see what happen. About uninstallaton it depend on program they might remain some components that ask you to remove them yourself. If you don't have TPM then you might consider to use Removable media such as pendrive instead , make sure you have latest update for Windows 7. You also could save the key in a safe area.

@Ed - Since you do not have TPM chip (this would be typically under Security in the BIOS) you would want to MAKE sure to do the hardware test prior to enabling Bitlocker as you can make yourself have to type in the Recovery Key upon each boot of the machine. Also, in regard to # 1 - Why would you want to be able to run applications from an encrypted drive that is still locked? That defeats the purpose of drive encryption. ThanksTanner --- This is posted as-is and has no warranty or guarantee ---

1) Ditch Zone Alarm, there are plenty of free perfectly sound Anti-Virus Software (Avast, AVG, MS Essentials, etc) for non business use. Install it on the root System drive (C:\). 3) You need a TPM compatible board to enable TPM. http://windows.microsoft.com/en-US/windows-vista/BitLocker-Drive-Encryption-Overview http://en.wikipedia.org/wiki/Trusted_Platform_Module If you want to encrypt your system drive using a USB stick, a major issue is that if you're USB is lost or corrupted you will have a very hard time (impossible) accessing the system drive. Also b/c it's required each time you boot, it becomes somewhat bothersome. http://www.sevenforums.com/tutorials/4681-bitlocker-drive-encryption-windows-7-drive-turn-off-no-tpm.html