Condividi tramite


Disable-BitLocker

Disable-BitLocker

Disables BitLocker encryption for a volume.

Syntax

Parameter Set: __AllParameterSets
Disable-BitLocker [-MountPoint] <String[]> [-Confirm] [-WhatIf] [ <CommonParameters>]

Detailed Description

The Disable-BitLocker cmdlet disables BitLocker Drive Encryption for a BitLocker volume. When you run this cmdlet, it removes all key protectors and begins decrypting the content of the volume.

If the volume that hosts the operating system contains any automatic unlocking keys, the cmdlet does not proceed. You can use the Clear-BitLockerAutoUnlock cmdlet to remove all automatic unlocking keys. Then you can disable BitLocker for the volume.

For an overview of BitLocker, see BitLocker Drive Encryption Overview (https://technet.microsoft.com/en-us/library/cc732774.aspx) on TechNet.

Parameters

-MountPoint<String[]>

Specifies an array of drive letters or BitLocker volume objects. The cmdlet disables protection for the volumes specified. To obtain a BitLocker volume object, use the Get-BitLockerVolume cmdlet.

Aliases

none

Required?

true

Position?

1

Default Value

none

Accept Pipeline Input?

True (ByValue, ByPropertyName)

Accept Wildcard Characters?

false

-Confirm

Prompts you for confirmation before running the cmdlet.

Required?

false

Position?

named

Default Value

false

Accept Pipeline Input?

false

Accept Wildcard Characters?

false

-WhatIf

Shows what would happen if the cmdlet runs. The cmdlet is not run.

Required?

false

Position?

named

Default Value

false

Accept Pipeline Input?

false

Accept Wildcard Characters?

false

<CommonParameters>

This cmdlet supports the common parameters: -Verbose, -Debug, -ErrorAction, -ErrorVariable, -OutBuffer, and -OutVariable. For more information, see    about_CommonParameters (https://go.microsoft.com/fwlink/p/?LinkID=113216).

Inputs

The input type is the type of the objects that you can pipe to the cmdlet.

  • BitLockerVolume[], String[]

Outputs

The output type is the type of the objects that the cmdlet emits.

  • BitLockerVolume[]

Examples

Example 1: Disable BitLocker for a volume

This command disables BitLocker for the specified BitLocker volume. BitLocker begins decrypting data on C: immediately.

PS C:\> Disable-BitLocker -MountPoint "C:" 

Example 2: Disable BitLocker for all volumes

This example disables BitLocker encryption for all volumes.

The first command uses Get-BitLockerVolume to get all the BitLocker volumes for the current computer and stores them in the $BLV variable.

The second command disables BitLocker encryption for all the BitLocker volumes stored in the $BLV variable. BitLocker begins decrypting data on the volumes.

PS C:\> $BLV = Get-BitLockerVolume
PS C:\> Disable-BitLocker -MountPoint $BLV

Enable-BitLocker

Lock-BitLocker

Resume-BitLocker

Suspend-BitLocker

Unlock-BitLocker

Get-BitLockerVolume