What we would like to do is encrypt the OS drive with BitLocker without a TPM by using an USB drive. Then encrypt the remaining drive space on the USB drive. Is this possible? We would like to be able to use the USB for other files but because of our business, Accounting Firm, we need the USB to be encrypted. Any help would be great.

What we would like to do is encrypt the OS drive with BitLocker without a TPM by using an USB drive. Then encrypt the remaining drive space on the USB drive. Is this possible? We would like to be able to use the USB for other files but because of our business, Accounting Firm, we need the USB to be encrypted. Any help would be great. BitLocker-to-Go (BitLocker for removable media) encrypts the whole of a piece of removable media. BitLocker-to-Go allows for a non-encrypted piece of file system to store the BitLocker-to-Go viewer. This piece of software allows pre-Windows 7 clients to access the encrypted files (after supplying the correct password, of course). As you'd assume, this piece of file system is read-only and resembles the file system of a CD-Rom. When you're using BitLocker Drive Encryption (BDE) with a startup key (a piece of removable media, with the BitLocker key to gain access to the encrypted Operating System) the key has to be unencrypted. You can not use BitLocker-to-Go on startup keys, since the Windows bootfiles do not support BitLocker-to-Go. (nor do they support Smart Cards, which is why these are not supported as unlock mechanisme for the encrypted drive containing the Operating System...)

There are other programs that allow access to a portion of the drive. Do you mean to tell me that the great Microsoft cannot do this? I can do this with TruCrypt but I have to allow my users to be administrators to do it.