Disabling BitLocker on Windows
BitLocker is a security feature in Windows that helps prevent unauthorized access to data by encrypting the entire system drive or selected drives on the computer. While an enabled BitLocker can be disabled locally through the Windows Command Prompt, the Control Panel, or Powershell, LogMeIn Resolve MDM offers several different ways to remotely disable BitLocker, making it easy to manage authorized access to a Windows device. In addition, LogMeIn Resolve MDM stores the recovery key on the device page so that administrators can retrieve it effortlessly.
Requirements
- The device is enrolled to LogMeIn Resolve MDM.
- Miradore client version 1.3.2 or newer is installed on the device.
- A Trusted Platform Module (TPM) chip is installed in the device.
- Windows 11: Pro, Enterprise, Education
- Windows 10: Pro, Enterprise, Education
- Windows 8.1: Pro, Enterprise
- Windows 7: Enterprise, Ultimate
Disable BitLocker for a single Windows device in LogMeIn Resolve MDM
To turn off BitLocker for Windows devices one by one, you can remove the configuration profile used to enable BitLocker.
- Navigate to .
- Open the Device page of the Windows device for which you want to turn off BitLocker and select the Deployments tab.
- Find the configuration profile that was deployed to enable BitLocker under Configuration profiles and use the
icon to remove the configuration profile.
Disable BitLocker for multiple Windows devices in LogMeIn Resolve MDM
To turn off BitLocker for several devices at once, you can use the Devices page in LogMeIn Resolve MDM.
Disable BitLocker if it was not enabled through a configuration profile via LogMeIn Resolve MDM
- Enter the following details for the command:
- Description (optional)
- Application name (required)
- Command type (required)
- CMD script (required)
- Success return codes (required)
- Required free disk space (MB) (optional)
Example script application details for disabling BitLockerYou may use the following CMD script: manage-bde -off C:.
Remove BitLocker using the recovery key
The BitLocker recovery key can be used to unlock an encrypted drive directly on the computer. If Miradore was used to enable BitLocker on a device, the recovery key is stored on the device page's Inventory tab. For detailed information on the BitLocker recovery key and how to find it in Miradore, see Finding the BitLocker recovery key.