Disable-BitLockerAutoUnlock

Disable-BitLockerAutoUnlock

Disables automatic unlocking for a BitLocker volume.

Syntax

Parameter Set: __AllParameterSets
Disable-BitLockerAutoUnlock [-MountPoint] <String[]> [-Confirm] [-WhatIf] [ <CommonParameters>]

Detailed Description

The Disable-BitLockerAutoUnlock cmdlet disables automatic unlocking for a volume protected by BitLocker Disk Encryption. The cmdlet removes automatic unlocking keys for specified volumes stored on a volume that hosts an operating system.

You can configure BitLocker to automatically unlock volumes that do not host an operating system. After a user unlocks the operating system volume, BitLocker uses encrypted information stored in the registry and volume metadata to access data volumes that use automatic unlocking.

You can specify a volume by drive letter, or you can specify a BitLocker volume object. You must remove automatic unlocking keys before you can disable BitLocker by using the Disable-BitLocker cmdlet. You can use the Clear-BitLockerAutoUnlock cmdlet to remove keys for all the volumes configured to use automatic unlocking instead of just specified volumes.

For an overview of BitLocker, see BitLocker Drive Encryption Overview (https://technet.microsoft.com/en-us/library/cc732774.aspx) on TechNet.

Parameters

-MountPoint<String[]>

Specifies an array of drive letters or BitLocker volume objects. The cmdlet disables automatic unlocking for the volumes specified. To obtain a BitLocker volume object, use the Get-BitLockerVolume cmdlet.

Aliases

none

Required?

true

Position?

1

Default Value

none

Accept Pipeline Input?

True (ByValue, ByPropertyName)

Accept Wildcard Characters?

false

-Confirm

Prompts you for confirmation before running the cmdlet.

Required?

false

Position?

named

Default Value

false

Accept Pipeline Input?

false

Accept Wildcard Characters?

false

-WhatIf

Shows what would happen if the cmdlet runs. The cmdlet is not run.

Required?

false

Position?

named

Default Value

false

Accept Pipeline Input?

false

Accept Wildcard Characters?

false

<CommonParameters>

This cmdlet supports the common parameters: -Verbose, -Debug, -ErrorAction, -ErrorVariable, -OutBuffer, and -OutVariable. For more information, see    about_CommonParameters (https://go.microsoft.com/fwlink/p/?LinkID=113216).

Inputs

The input type is the type of the objects that you can pipe to the cmdlet.

  • BitLockerVolume[], String[]

Outputs

The output type is the type of the objects that the cmdlet emits.

  • BitLockerVolume[]

Examples

Example 1: Disable automatic unlocking for a volume

This command disables automatic unlocking for the specified BitLocker volume.

PS C:\> Disable-AutoUnlock -MountPoint "E:"

Clear-BitLockerAutoUnlock

Enable-BitLockerAutoUnlock

Get-BitLockerVolume