Disable BitLocker in Windows
BitLocker is a security feature in Windows that helps prevent unauthorized access to data by encrypting the entire system drive or selected drives on the computer. While an enabled BitLocker can be disabled locally through the Windows Command Prompt, the Control Panel, or Powershell, LogMeIn Resolve MDM offers a way to remotely disable BitLocker, making it easy to manage authorized access to a Windows device.
Before you begin: Ensure your device meets the following requirements:
- The device is enrolled to LogMeIn Resolve MDM.
- Miradore client version 1.3.2 or newer is installed on the device.
- A Trusted Platform Module (TPM) chip is installed in the device.
BitLocker can be used with the following Windows versions and editions:
- Windows 11: Pro, Enterprise, Education
- Windows 10: Pro, Enterprise, Education
- Windows 8.1: Pro, Enterprise
- Windows 7: Enterprise, Ultimate
For more information on enabling BitLocker on your Windows devices, see Enable BitLocker for Windows.
Disable BitLocker for a single Windows device in LogMeIn Resolve MDM
- Navigate to .
- Open the Device page of the Windows device for which you want to turn off BitLocker and select the Deployments tab.
- Find the configuration profile that was deployed to enable BitLocker under Configuration profiles and use the
icon to remove the configuration profile.
To turn off BitLocker for Windows devices one by one, you can remove the configuration profile used to enable BitLocker.You can only disable BitLocker by removing the configuration profile if BitLocker was enabled through a configuration profile.
Disable BitLocker for multiple Windows devices in LogMeIn Resolve MDM
To turn off BitLocker for several devices at once, you can use the Devices page in LogMeIn Resolve MDM.You can only disable BitLocker by removing the configuration profile if BitLocker was enabled through a configuration profile.
Disable BitLocker if it was not enabled through a configuration profile via LogMeIn Resolve MDM
- Enter the following details for the command:
- Description (optional)
- Application name (required)
- Command type (required)
- CMD script (required)
- Success return codes (required)
- Required free disk space (MB) (optional)
Example script application details for disabling BitLockerYou may use the following CMD script: manage-bde -off C:.
If BitLocker wasn't turned on by deploying a configuration profile on the device through LogMeIn Resolve MDM, you can use a script to disable it and run it on the device straight from LogMeIn Resolve MDM.
Article last updated: 21 January, 2025