Table of contents
TLS
TOC
Collapse the table of content
Expand the table of content

Disable-BitLockerAutoUnlock

Brian Lich|Last Updated: 3/8/2017

SYNOPSIS

Disables automatic unlocking for a BitLocker volume.

SYNTAX

Disable-BitLockerAutoUnlock [-MountPoint] <String[]> [-WhatIf] [-Confirm] [<CommonParameters>]

DESCRIPTION

The Disable-BitLockerAutoUnlock cmdlet disables automatic unlocking for a volume protected by BitLocker Disk Encryption. The cmdlet removes automatic unlocking keys for specified volumes stored on a volume that hosts an operating system.

You can configure BitLocker to automatically unlock volumes that do not host an operating system. After a user unlocks the operating system volume, BitLocker uses encrypted information stored in the registry and volume metadata to access data volumes that use automatic unlocking.

You can specify a volume by drive letter, or you can specify a BitLocker volume object. You must remove automatic unlocking keys before you can disable BitLocker by using the Disable-BitLocker cmdlet. You can use the Clear-BitLockerAutoUnlock cmdlet to remove keys for all the volumes configured to use automatic unlocking instead of just specified volumes.

For an overview of BitLocker, see BitLocker Drive Encryption Overview on TechNet.

EXAMPLES

Example 1: Disable automatic unlocking for a volume

PS C:\> Disable-AutoUnlock -MountPoint "E:"

This command disables automatic unlocking for the specified BitLocker volume.

PARAMETERS

-Confirm

Prompts you for confirmation before running the cmdlet.

Type: SwitchParameter
Parameter Sets: (All)
Aliases: cf

Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False

-MountPoint

Specifies an array of drive letters or BitLocker volume objects. The cmdlet disables automatic unlocking for the volumes specified. To obtain a BitLocker volume object, use the Get-BitLockerVolume cmdlet.

Type: String[]
Parameter Sets: (All)
Aliases: 

Required: True
Position: 0
Default value: None
Accept pipeline input: True (ByPropertyName, ByValue)
Accept wildcard characters: False

-WhatIf

Shows what would happen if the cmdlet runs. The cmdlet is not run.

Type: SwitchParameter
Parameter Sets: (All)
Aliases: wi

Required: False
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False

CommonParameters

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

INPUTS

BitLockerVolume[], String[]

OUTPUTS

BitLockerVolume[]

NOTES

Clear-BitLockerAutoUnlock

Enable-BitLockerAutoUnlock

Get-BitLockerVolume

© 2017 Microsoft