Table of contents
TLS
TOC
Collapse the table of content
Expand the table of content

Disable-BitLocker

Last Updated: 3/8/2017

SYNOPSIS

Disables BitLocker Drive Encryption for a volume.

SYNTAX

Disable-BitLocker [-MountPoint] <String[]> [-WhatIf] [-Confirm] [<CommonParameters>]

DESCRIPTION

The Disable-BitLocker cmdlet disables BitLocker Drive Encryption for a BitLocker volume. When you run this cmdlet, it removes all key protectors and begins decrypting the content of the volume.

If the volume that hosts the operating system contains any automatic unlocking keys, the cmdlet does not proceed. You can use the Clear-BitLockerAutoUnlock cmdlet to remove all automatic unlocking keys. Then you can disable BitLocker for the volume.

For an overview of BitLocker, see BitLocker Drive Encryption Overview on TechNet.

EXAMPLES

Example 1: Disable BitLocker for a volume

PS C:\> Disable-BitLocker -MountPoint "C:"

This command disables BitLocker for the specified BitLocker volume. BitLocker begins decrypting data on C: immediately.

Example 2: Disable BitLocker for all volumes

PS C:\>$BLV = Get-BitLockerVolume
PS C:\>Disable-BitLocker -MountPoint $BLV

This example disables BitLocker encryption for all volumes.

The first command uses Get-BitLockerVolume to get all the BitLocker volumes for the current computer and stores them in the $BLV variable.

The second command disables BitLocker encryption for all the BitLocker volumes stored in the $BLV variable. BitLocker begins decrypting data on the volumes.

PARAMETERS

-Confirm

Prompts you for confirmation before running the cmdlet.

Type: SwitchParameter
Parameter Sets: (All)
Aliases: cf

Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False

-MountPoint

Specifies an array of drive letters or BitLocker volume objects. The cmdlet disables protection for the volumes specified. To obtain a BitLocker volume object, use the Get-BitLockerVolume cmdlet.

Type: String[]
Parameter Sets: (All)
Aliases: 

Required: True
Position: 0
Default value: None
Accept pipeline input: True (ByPropertyName, ByValue)
Accept wildcard characters: False

-WhatIf

Shows what would happen if the cmdlet runs. The cmdlet is not run.

Type: SwitchParameter
Parameter Sets: (All)
Aliases: wi

Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False

CommonParameters

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

INPUTS

BitLockerVolume[], String[]

OUTPUTS

BitLockerVolume[]

NOTES

Enable-BitLocker

Get-BitLockerVolume

Lock-BitLocker

Resume-BitLocker

Suspend-BitLocker

Unlock-BitLocker

© 2017 Microsoft