How to disable BitLocker in Windows?
BitLocker is a security feature in Windows that helps prevent unauthorized access to data by encrypting the entire system drive or selected drives on the computer. While an enabled BitLocker can be disabled locally through the Windows Command Prompt, the Control Panel, or Powershell, GoTo Resolve MDM offers a way to remotely disable BitLocker, making it easy to manage authorized access to a Windows device.
Before you begin: Ensure your device meets the following requirements:
- The device is enrolled to GoTo Resolve MDM.
- Miradore Client version 1.3.2 or newer is installed on the device.
- A Trusted Platform Module (TPM) chip is installed in the device.
BitLocker can be used with the following Windows versions and editions:
- Windows 11: Pro, Enterprise, Education
- Windows 10: Pro, Enterprise, Education
- Windows 8.1: Pro, Enterprise
- Windows 7: Enterprise, Ultimate
For more information on enabling BitLocker on your Windows devices, see Enabling BitLocker for Windows.
How to disable BitLocker for a single Windows device in GoTo Resolve MDM?
- Navigate to .
- Open the Device page of the Windows device for which you want to turn off BitLocker and select the Deployments tab.
- Find the configuration profile that was deployed to enable BitLocker under Configuration profiles and use the
icon to remove the configuration profile.
To turn off BitLocker for Windows devices one by one, you can remove the configuration profile used to enable BitLocker.You can only disable BitLocker by removing the configuration profile if BitLocker was enabled through a configuration profile.
How to disable BitLocker for multiple Windows devices in GoTo Resolve MDM?
To turn off BitLocker for several devices at once, you can use the Devices page in GoTo Resolve MDM.You can only disable BitLocker by removing the configuration profile if BitLocker was enabled through a configuration profile.
How to disable BitLocker if it was not enabled through a configuration profile via GoTo Resolve MDM?
- Enter the following details for the command:
- Description (optional)
- Application name (required)
- Command type (required)
- CMD script (required)
- Success return codes (required)
- Required free disk space (MB) (optional)
Example script application details for disabling BitLockerYou may use the following CMD script: manage-bde -off C:.
If BitLocker wasn't turned on by deploying a configuration profile on the device through GoTo Resolve MDM, you can use a script to disable it and run it on the device straight from GoTo Resolve MDM.
Article last updated: 29 October, 2024