Disable-BitLocker
Disable-BitLocker
Disables BitLocker encryption for a volume.
Syntax
Parameter Set: __AllParameterSets
Disable-BitLocker [-MountPoint] <String[]> [-Confirm] [-WhatIf] [ <CommonParameters>]
Detailed Description
The Disable-BitLocker cmdlet disables BitLocker Drive Encryption for a BitLocker volume. When you run this cmdlet, it removes all key protectors and begins decrypting the content of the volume.
If the volume that hosts the operating system contains any automatic unlocking keys, the cmdlet does not proceed. You can use the Clear-BitLockerAutoUnlock cmdlet to remove all automatic unlocking keys. Then you can disable BitLocker for the volume.
For an overview of BitLocker, see BitLocker Drive Encryption Overview (https://technet.microsoft.com/en-us/library/cc732774.aspx) on TechNet.
Parameters
-MountPoint<String[]>
Specifies an array of drive letters or BitLocker volume objects. The cmdlet disables protection for the volumes specified. To obtain a BitLocker volume object, use the Get-BitLockerVolume cmdlet.
Aliases |
none |
Required? |
true |
Position? |
1 |
Default Value |
none |
Accept Pipeline Input? |
True (ByValue, ByPropertyName) |
Accept Wildcard Characters? |
false |
-Confirm
Prompts you for confirmation before running the cmdlet.
Required? |
false |
Position? |
named |
Default Value |
false |
Accept Pipeline Input? |
false |
Accept Wildcard Characters? |
false |
-WhatIf
Shows what would happen if the cmdlet runs. The cmdlet is not run.
Required? |
false |
Position? |
named |
Default Value |
false |
Accept Pipeline Input? |
false |
Accept Wildcard Characters? |
false |
<CommonParameters>
This cmdlet supports the common parameters: -Verbose, -Debug, -ErrorAction, -ErrorVariable, -OutBuffer, and -OutVariable. For more information, see about_CommonParameters (https://go.microsoft.com/fwlink/p/?LinkID=113216).
Inputs
The input type is the type of the objects that you can pipe to the cmdlet.
- BitLockerVolume[], String[]
Outputs
The output type is the type of the objects that the cmdlet emits.
- BitLockerVolume[]
Examples
Example 1: Disable BitLocker for a volume
This command disables BitLocker for the specified BitLocker volume. BitLocker begins decrypting data on C: immediately.
PS C:\> Disable-BitLocker -MountPoint "C:"
Example 2: Disable BitLocker for all volumes
This example disables BitLocker encryption for all volumes.
The first command uses Get-BitLockerVolume to get all the BitLocker volumes for the current computer and stores them in the $BLV variable.
The second command disables BitLocker encryption for all the BitLocker volumes stored in the $BLV variable. BitLocker begins decrypting data on the volumes.
PS C:\> $BLV = Get-BitLockerVolume
PS C:\> Disable-BitLocker -MountPoint $BLV