Unsolved
1 Rookie
•
1 Message
0
31
October 24th, 2025 08:11
bitlocker
Has anyone noticed when doing a sysprep bitlocker auto enrols? Its really annoying as we have to turn bitlocker off, but once we turn bitlocker off, our GPO wont then automatically enable it, so on every machine now we have to enable bitlocker. Currently we do "manage-bde off C:" and that allows us to sysprep the machine, but anyone know the command to reset it? to have it decrypted and off but not forced off?
No Events found!
anne_droid
3 Apprentice
•
1.1K Posts
0
October 26th, 2025 11:52
Hi
I think these may help....
manage-bde -status
manage-bde off C:
manage-bde on C:
manage-bde -pause C:
manage-bde -resume C:
And the internet also gives this...
The most commonly used manage-bde commands for BitLocker management in Windows are as follows:
manage-bde -lock <drive>:
Locks the specified BitLocker-protected drive, making data inaccessible until unlocked.
manage-bde -unlock <drive> -password/-recoverykey:
Unlocks the drive with a password or recovery key.
manage-bde -autounlock <drive>:
Manages automatic unlocking of a drive, such as data drives protected by BitLocker.
manage-bde -protectors:
Manages key protection methods (add, list, remove) for BitLocker, such as passwords, PINs, recovery keys, or startup keys.
manage-bde -tpm:
Configures Trusted Platform Module (TPM) for use with BitLocker.
manage-bde -changepassword:
Changes the password used for protecting the drive.
manage-bde -changepin:
Changes the PIN for BitLocker startup if a PIN protector is used.
manage-bde -changekey:
Changes the startup key protector on a drive.
manage-bde -forcerecovery <drive>:
Forces the drive into recovery mode so the recovery key must be provided on next access.
manage-bde -wipefreespace <drive>:
Wipes free space on a BitLocker-protected drive.
You can run manage-bde -? or manage-bde /? to list all available switches and get detailed syntax and help.