Disable BitLocker on Windows devices

Integrated into the Windows operating system, BitLocker serves as a security feature designed to implement encryption on system drives, fixed data drives, and removable drives for enhanced data protection. However, there may arise situations where the need for BitLocker encryption is no longer necessary.

The following PowerShell script helps the IT Admins to remotely disable BitLocker on a managed Windows devices.

1. Create a file on your desktop, for example, disable_bitlocker.ps1 and open it in a text editor like notepad++

2. Copy the contents below to the file or click here to download the file.

   1. Replace ‘X’ with the actual drive letter for which you need to disable BitLocker encryption.
      

      PS C:\> Disable-BitLocker -MountPoint "X:"

3. Follow our guide to upload & publish the PowerShell script using Scalefusion Dashboard.

Please exercise caution when disabling BitLocker, as it involves decrypting the data on the volumes, and you should have the necessary permissions to perform such operations.

Please ensure that you have the necessary permissions to disable BitLocker, as this operation involves decrypting the data on the specified drive. If the drive is currently in use, you might be prompted to confirm the operation or restart the computer to complete the process.

Please note that to use the PowerShell scripts, the Scalefusion MDM Agent Application must be installed on the device(s). Please follow our guide to publish and install the Scalefusion MDM Agent Application.

Notes:

1. The scripts and their contents are sourced from various albeit authenticated Microsoft sources and forums.

2. Please validate the scripts on a test machine before deploying them on all your managed devices.

3. Scalefusion has tested these scripts, however, Scalefusion will not be responsible for any loss of data or system malfunction that may arise due to the incorrect usage of these scripts.