尝试在加入OU（组织单位^{(Organizational Unit)}）中的域的计算机上使用 BitLocker 加密 Windows 10 系统驱动器时，您可能会遇到错误消息在 BitLocker 设置期间发生问题。^{(A problem occurred during BitLocker setup)}这篇文章为这个问题提供了最合适的解决方案。应该注意的是，错误消息的实例伴随着不同的错误代码，如0x8004259a、0x80072ee7、0x80042574等。以下是一些可以帮助您的建议。

当你遇到这个问题。您将收到以下类似的错误消息；

BitLocker Drive Encryption (D:)
Starting encryption
A problem occurred during BitLocker setup. You may need to restart BitLocker setup to continue. Error code: 0x80072ee7
Don’t remove your drive until encryption begins.

重新启动BitLocker^(BitLocker) 安装程序甚至多次重新启动后，问题似乎都没有解决。

BitLocker安装过程中出现问题

如果您遇到此问题，可以尝试以下建议来解决问题。

1. 检查 BitLocker 要求
2. 创建本地管理员^{(Administrator)}帐户
3. 确保机器连接到公司网络
4. 重命名 OU
5. 缩小驱动器
6. 将动态磁盘转换为基本磁盘

让我们看一下关于列出的每个解决方案所涉及的过程的描述。

1] 检查 BitLocker 要求

确保^(Make)您的系统，尤其是您要加密的驱动器符合BitLocker要求，如下所列：

• 它必须有足够的可用空间来创建分区的卷影副本。
• 它必须至少有 100MB 的硬盘空间。
• 如果分区小于 500MB，则必须至少有 50MB 的可用空间。
• 如果分区为 500MB 或更大，则必须至少有 320MB 的可用空间。
• 如果分区大于 1GB，建议至少有 1GB 可用空间。

2]创建^(Create)一个本地管理员^{(Administrator)}帐户

如果您尝试使用您的域帐户加密驱动器，则可能会出现此问题。在这种情况下，我们建议您创建一个本地管理员帐户^{(create a local administrator account)}并查看是否可以加密驱动器。

3]确保^(Ensure)机器连接到公司网络

如果您的系统在网络级别进行管理，您可能会遇到此问题，因为这两个组策略^{(Group Policy)}设置：

• 选择如何恢复受 BitLocker 保护的操作系统驱动器^{(Choose how BitLocker-protected operating system drives can be recovered )}和
• 在操作系统驱动器的 AD DS 中存储恢复信息之前，请勿启用 BitLocker^{(Do not enable BitLocker until recovery information is stored in AD DS for operating system drives)}

可能在以下位置启用：

Computer Configuration > Administrative Templates > Windows Components > BitLocker Drive Encryption > Operating System Drives

因此，在这种情况下，请确保机器连接到公司网络。

4]重命名OU

如果您的系统是域的一部分，在 OU 中，在其名称中包含正斜杠 (/)，您可以通过重命名 OU 来删除正斜杠 (/)，看看这是否为您解决了问题。

5]缩小驱动器

此解决方案要求您缩小启用BitLocker的驱动器，看看是否有帮助。Shrink 可以从Windows 10中提供的^{(Windows 10)}磁盘管理^{(Disk Management)}工具中使用。

6]将动态^{(Convert Dynamic)}磁盘转换为基本^(Basic)磁盘

此问题的另一个原因可能是 系统保留分区 (SRP)^{(System Reserved Partition (SRP))}的外壳。如果 SRP 位于动态磁盘上，则会出现此问题。在这种情况下，您需要将动态磁盘转换为基本磁盘^{(convert the dynamic disk to basic disk)} 以修复此错误并启用BitLocker。

希望这可以帮助！

阅读下一篇^{(Read next)}：BitLocker 安装程序无法导出 BCD（引导配置数据）存储^{(BitLocker Setup failed to export the BCD (Boot Configuration Data) store)}。

A problem occurred during BitLocker setup on Windows 10

You may encounter the error message A problem occurred during BitLocker setup when attempting to encrypt Windows 10 system drive with BitLocker on a machine joined to the domain in an OU (Organizational Unit). This post provides the most suitable solutions to this issue. It should be noted that an instance of the error message is accompanied by different error codes like 0x8004259a, 0x80072ee7, 0x80042574, etc. Here are some suggestions that can help you.

When you encounter this issue. you’ll receive the following similar error message;

BitLocker Drive Encryption (D:)
Starting encryption
A problem occurred during BitLocker setup. You may need to restart BitLocker setup to continue. Error code: 0x80072ee7
Don’t remove your drive until encryption begins.

The problem doesn’t seem to solve after restarting BitLocker setup or even after multiple reboots.

A problem occurred during BitLocker setup

If you’re faced with this issue, you can try the suggestions below to resolve the issue.

1. Check BitLocker requirements
2. Create a Local Administrator account
3. Ensure the machine is connected to the corporate network
4. Rename the OU
5. Shrink the drive
6. Convert Dynamic disk to Basic disk

Let’s take a look at the description of the process involved concerning each of the listed solutions.

1] Check BitLocker requirements

Make sure your system and especially the drive you’re about to encrypt meets the BitLocker requirements as listed below:

• It must have enough free space to create shadow copies of the partition.
• It must have at least 100MB of hard drive space.
• If the partition is less than 500MB, it must have at least 50MB of free space.
• If the partition is 500MB or larger, it must have at least 320MB of free space.
• If the partition is larger than 1GB, it is recommended that it should have at least 1GB free.

2] Create a Local Administrator account

If you’re trying to encrypt the drive using your domain account, this issue might occur. In this case, we suggest you create a local administrator account and see if you can encrypt the drive.

3] Ensure the machine is connected to the corporate network

You may encounter this issue if your system is managed at the network level, because of both the Group Policy settings:

• Choose how BitLocker-protected operating system drives can be recovered AND
• Do not enable BitLocker until recovery information is stored in AD DS for operating system drives

might be enabled at the following location:

Computer Configuration > Administrative Templates > Windows Components > BitLocker Drive Encryption > Operating System Drives

So, in this case, ensure the machine is connected to the corporate network.

4] Rename the OU

If your system is part of the domain, within an OU, including a forward slash (/) in its name, you can remove the forward slash (/) by renaming the OU and see if that solves the issue for you.

5] Shrink the drive

This solution requires you to shrink the drive on which you’re enabling BitLocker and see if that helps. Shrink can be used from the Disk Management tool, which is available in Windows 10.

6] Convert Dynamic disk to Basic disk

Another cause for this issue may be the housing of System Reserved Partition (SRP). If SRP lies on a dynamic disk, this issue is expected. In this case, you need to convert the dynamic disk to basic disk to fix this error and enable BitLocker.

Hope this helps!

Read next: BitLocker Setup failed to export the BCD (Boot Configuration Data) store.

Related posts

• Fix BitLocker Drive Encryption不能使用，Error 0x8031004A

• BitLocker Setup未能导出BCD（Boot Configuration Data）商店

• Fix Bdeunlock.exe Bad image，System Error或不响应错误

• BitLocker encryption此驱动器上与您的窗口不兼容

• 指定的数据驱动器未设置为自动解锁 - BitLocker error

• 如何在 Windows 10 上关闭或禁用 Bitlocker

• 在Windows中访问BitLocker的3种方法

• 如何在 Windows 10 中禁用 BitLocker

• 如何在Windows 10中更改BitLocker PIN

• 如何删除BitLocker从USB drive开始

• 如何在 Windows 上允许没有兼容 TPM 芯片的 BitLocker

• 在Removable Data驱动器上启用或禁用BitLocker的使用

• 如何在USB memory stick or flash drive管理BitLocker

• 修复启用 BitLocker 时“此设备无法使用受信任的平台模块”

• 如何在Windows 10恢复或暂停BitLocker encryption

• 如何使用 Bitlocker 加密 Windows 10 硬盘

• 在 Windows 10 中使用 BitLocker To Go 加密 USB 驱动器

• 如何在Windows 10中加密system partition BitLocker

• 如何在Windows 10启用和Set Up BitLocker Encryption

• 太多PIN entry尝试Windows 10 BitLocker error