Freigeben über


Lock-BitLocker

Lock-BitLocker

Prevents access to encrypted data on a BitLocker volume.

Syntax

Parameter Set: __AllParameterSets
Lock-BitLocker [-MountPoint] <String[]> [-ForceDismount] [-Confirm] [-WhatIf] [ <CommonParameters>]

Detailed Description

The Lock-BitLocker cmdlet prevents access to all encrypted data on a volume that uses BitLocker Drive Encryption. You can use the Unlock-BitLocker cmdlet to restore access.

You can specify a volume to lock by drive letter, or you can specify a BitLocker volume object. This cmdlet cannot lock a volume that hosts the operating system. If you attempt to lock an already locked volume, this cmdlet does nothing.

For an overview of BitLocker, see BitLocker Drive Encryption Overview (https://technet.microsoft.com/en-us/library/cc732774.aspx) on TechNet.

Parameters

-ForceDismount

Indicates that the cmdlet attempts to lock a drive even if the drive is in use.

Aliases

fd

Required?

false

Position?

named

Default Value

false

Accept Pipeline Input?

false

Accept Wildcard Characters?

false

-MountPoint<String[]>

Specifies an array of drive letters or BitLocker volume objects. The cmdlet attempts to lock the volumes specified. To obtain a BitLocker volume object, use the Get-BitLockerVolume cmdlet.

Aliases

none

Required?

true

Position?

1

Default Value

none

Accept Pipeline Input?

True (ByValue, ByPropertyName)

Accept Wildcard Characters?

false

-Confirm

Prompts you for confirmation before running the cmdlet.

Required?

false

Position?

named

Default Value

false

Accept Pipeline Input?

false

Accept Wildcard Characters?

false

-WhatIf

Shows what would happen if the cmdlet runs. The cmdlet is not run.

Required?

false

Position?

named

Default Value

false

Accept Pipeline Input?

false

Accept Wildcard Characters?

false

<CommonParameters>

This cmdlet supports the common parameters: -Verbose, -Debug, -ErrorAction, -ErrorVariable, -OutBuffer, and -OutVariable. For more information, see    about_CommonParameters (https://go.microsoft.com/fwlink/p/?LinkID=113216).

Inputs

The input type is the type of the objects that you can pipe to the cmdlet.

  • BitLockerVolume[], String[]

Outputs

The output type is the type of the objects that the cmdlet emits.

  • BitLockerVolume[]

Examples

Example 1: Lock a volume

This command locks the BitLocker volume specified with the Mount parameter. The command uses the ForceDismount parameter, so the cmdlet attempts to lock the volume even if it is in use.

PS C:\> Lock-Volume -MountPoint "E:" -ForceDismount

Disable-BitLocker

Enable-BitLocker

Resume-BitLocker

Suspend-BitLocker

Unlock-BitLocker

Get-BitLockerVolume