Privacy and Security Turn Off BitLocker for Drive in Windows 11


BitLocker_unlocked_drive_banner.png

This tutorial will show you how to turn off BitLocker for an encrypted drive in Windows 10 and Windows 11.

BitLocker Drive Encryption is a data protection feature that integrates with the operating system and addresses the threats of data theft or exposure from lost, stolen, or inappropriately decommissioned drives and computers.

You can turn on BitLocker to encrypt the operating system drive (Windows drive), fixed data drives (internal hard drives), and removable data drives (external hard drive or USB flash drive).

When you turn off BitLocker for a drive encrypted by BitLocker, it will completely decrypt the drive.


It is required to unlock the BitLocker encrypted drive before being able to turn off BitLocker for the drive.

You must be signed in as an administrator to turn off BitLocker for a operating system drive and fixed data drive. You are not required to be an administrator to unlock your removable data drive.

BitLocker Drive Encryption is only available in the Windows 11 Pro, Enterprise, and Education editions.



Contents

  • Option One: Turn Off BitLocker for Drive from Context Menu
  • Option Two: Turn Off BitLocker for Drive in BitLocker Manager
  • Option Three: Turn Off BitLocker for Drive using manage-bde Command
  • Option Four: Turn Off BitLocker for Drive in PowerShell




Option One

Turn Off BitLocker for Drive from Context Menu


This option requires adding Turn off BitLocker to the context menu first.


1 Open This PC in File Explorer (Win+E).

2 Right click or press and hold on the drive you want to decrypt, and click/tap on Show more options.

You can skip step 2 in Windows 10 since Show more options is not available.


3 Click/tap on Turn off BitLocker. (see screenshot below)

Turn_off_BitLocker_context_menu.png




Option Two

Turn Off BitLocker for Drive in BitLocker Manager


1 Open the Control Panel (icons view), and click/tap on the BitLocker Drive Encryption icon.

2 Click/tap on Turn off BitLocker for the encrypted drive you want to decrypt. (see screenshot below)

Turn_off_BitLocker_Control_Panel-1.png

3 Click/tap on Turn off BitLocker to confirm. (see screenshot below)

Turn_off_BitLocker_Control_Panel-2.png

4 The drive will now start decrypting. (see screenshot below)

Turn_off_BitLocker_Control_Panel-3.png

5 Click/tap on Close when decryption is complete. (see screenshot below)

Turn_off_BitLocker_Control_Panel-4.png




Option Three

Turn Off BitLocker for Drive using manage-bde Command


You must be signed in as an administrator to use this option.


1 Open Windows Terminal (Admin), and select either Windows PowerShell or Command Prompt.

2 Type the command below into Windows Terminal (Admin), and press Enter. (see screenshot below)

manage-bde -off <drive letter>:

Substitute <drive letter> in the command above with the actual drive letter of the encrypted drive you want to decrypt.

For example: manage-bde -off F:


You can check the status of BitLocker for the drive at anytime.


Turn_off_BitLocker_mange-bde.png





Option Four

Turn Off BitLocker for Drive in PowerShell


1 Open Windows Terminal (Admin), and select Windows PowerShell.

2. Type the command below into Windows Terminal (Admin), and press Enter. (see screenshot below)

Disable-BitLocker -MountPoint "<drive letter>:"

Substitute <drive letter> in the command above with the actual drive letter of the encrypted drive you want to decrypt.

For example: Disable-BitLocker -MountPoint "F:"


You can check the status of BitLocker for the drive at anytime.


Turn_off_BitLocker_PowerShell.png



That's it,
Shawn Brink


 
Last edited:
The simple DOS commands in OPTION THREE work fine for ancient relics like me.


In OPTION ONE, I can't see any BitLocker (BL) commands in the context menu.


In OPTION TWO, step 1. the "BitLocker Drive Encryption icon" is not presented. Google says "you don't have the right edition of Windows." I have Win 11 Home.

However, Google also gave me several (at least two from memory) methods of arriving at a window containing the command "Turn off BL" - exactly as in this tutorial. None of these commands worked as expected. (Of course, if the "Turn off BL" command had earlier worked silently, then my later attempts to turn off BL would have shown the command "Turn on BL" ;-) )

For the BL command, I saw exactly the same blue text as in your screenshots. Can't remember about the icon.

Note 1: I'm a "reduced privilege" Admin on my own machine. In other words, I get the UAC prompt occasionally. But I saw no UAC prompt for the BL command.

Note 2:The "Turn off BL" command appears at the end of of several other possible chains. In each case, there's zero response.

Here's an example:

- Settings > System > Storage > Advanced storage settings > Disks & Volumes > C: > Properties > BitLocker > Turn on BitLocker (I see that command, because I've turned BL off. And no - I don't want to test it !!)

Note 3: I hope no-one thinks that there's any criticism of Shawn in this post. He recorded what he saw, and I recorded what I saw. His screenshots are sufficient proof.
 
Last edited:

My Computer

System One

  • OS
    Windows 10
    Computer type
    Laptop
    Manufacturer/Model
    Dell XPS 17
Can I ask why would I want to turn off Bitlocker? Is there some positives to it or..?
 

My Computer

System One

  • OS
    Windows 11 Pro Version 23H2(OS Build 22631.4317)
    Computer type
    PC/Desktop
    Manufacturer/Model
    AMD
    CPU
    12-Core AMD Ryzen 9 5900X, 4950 MHz (49.5 x 100)
    Motherboard
    Gigabyte X570 Aorus Master
    Memory
    4 - G Skill Trident Z Neo F4-3600C16-16GTZNC
    Graphics Card(s)
    PCI Express 4.0 x16: PowerColor RX 6800
    Sound Card
    Realtek ALC1220 @ AMD K19.2 - High Definition Audio Controller
    Monitor(s) Displays
    2 - 27 inch Westinghouse
    Screen Resolution
    1920 x 1080
    Hard Drives
    2 SSD - 2 TB each
    1 SSD - 4TB
    1 HDD - 2TB
    Keyboard
    logitech
    Mouse
    logitech
    Internet Speed
    1 GB
    Browser
    Firefox
    Antivirus
    Eset Endpoint Security
Can I ask why would I want to turn off Bitlocker? Is there some positives to it or..?
Hello, :-)

Normally, you wouldn't turn off BitLocker for security reasons, but there may be times you need to temporarily suspend or turn off BitLocker for the OS drive to prevent it from interfering with things like a firmware update.
 

My Computers

System One System Two

  • OS
    Windows 11 Pro for Workstations
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom self build
    CPU
    Intel i7-8700K 5 GHz
    Motherboard
    ASUS ROG Maximus XI Formula Z390
    Memory
    64 GB (4x16GB) G.SKILL TridentZ RGB DDR4 3600 MHz (F4-3600C18D-32GTZR)
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING (11GB GDDR5X)
    Sound Card
    Integrated Digital Audio (S/PDIF)
    Monitor(s) Displays
    2 x Samsung Odyssey G75 27"
    Screen Resolution
    2560x1440
    Hard Drives
    1TB Samsung 990 PRO M.2,
    4TB Samsung 990 PRO M.2,
    8TB WD MyCloudEX2Ultra NAS
    PSU
    Seasonic Prime Titanium 850W
    Case
    Thermaltake Core P3 wall mounted
    Cooling
    Corsair Hydro H115i
    Keyboard
    Logitech wireless K800
    Mouse
    Logitech MX Master 3
    Internet Speed
    1 Gbps Download and 35 Mbps Upload
    Browser
    Google Chrome
    Antivirus
    Microsoft Defender and Malwarebytes Premium
    Other Info
    Logitech Z625 speaker system,
    Logitech BRIO 4K Pro webcam,
    HP Color LaserJet Pro MFP M477fdn,
    CyberPower CP1500PFCLCD
    Galaxy S23 Plus phone
  • Operating System
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Surface Laptop 7 Copilot+ PC
    CPU
    Snapdragon X Elite (12 core) 3.42 GHz
    Memory
    16 GB LPDDR5x-7467 MHz
    Monitor(s) Displays
    15" HDR
    Screen Resolution
    2496 x 1664
    Hard Drives
    1 TB SSD
    Internet Speed
    Wi-Fi 7 and Bluetooth 5.4
    Browser
    Chrome and Edge
    Antivirus
    Windows Defender
Hello @OldGrantonian, :-)

If you have a Home edition of Windows, you wouldn't have options 1 and 2 available.

Instead, you would have Device Encryption below. Options 3 and 4 would still turn off Device Encryption though since it's basically a lite version of BitLocker.

 

My Computers

System One System Two

  • OS
    Windows 11 Pro for Workstations
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom self build
    CPU
    Intel i7-8700K 5 GHz
    Motherboard
    ASUS ROG Maximus XI Formula Z390
    Memory
    64 GB (4x16GB) G.SKILL TridentZ RGB DDR4 3600 MHz (F4-3600C18D-32GTZR)
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING (11GB GDDR5X)
    Sound Card
    Integrated Digital Audio (S/PDIF)
    Monitor(s) Displays
    2 x Samsung Odyssey G75 27"
    Screen Resolution
    2560x1440
    Hard Drives
    1TB Samsung 990 PRO M.2,
    4TB Samsung 990 PRO M.2,
    8TB WD MyCloudEX2Ultra NAS
    PSU
    Seasonic Prime Titanium 850W
    Case
    Thermaltake Core P3 wall mounted
    Cooling
    Corsair Hydro H115i
    Keyboard
    Logitech wireless K800
    Mouse
    Logitech MX Master 3
    Internet Speed
    1 Gbps Download and 35 Mbps Upload
    Browser
    Google Chrome
    Antivirus
    Microsoft Defender and Malwarebytes Premium
    Other Info
    Logitech Z625 speaker system,
    Logitech BRIO 4K Pro webcam,
    HP Color LaserJet Pro MFP M477fdn,
    CyberPower CP1500PFCLCD
    Galaxy S23 Plus phone
  • Operating System
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Surface Laptop 7 Copilot+ PC
    CPU
    Snapdragon X Elite (12 core) 3.42 GHz
    Memory
    16 GB LPDDR5x-7467 MHz
    Monitor(s) Displays
    15" HDR
    Screen Resolution
    2496 x 1664
    Hard Drives
    1 TB SSD
    Internet Speed
    Wi-Fi 7 and Bluetooth 5.4
    Browser
    Chrome and Edge
    Antivirus
    Windows Defender
My Computer (click below) came with BitLocker turned ON.

For security reasons it remains turned ON.
 

My Computer

System One

  • OS
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Dell XPS 16 9640
    CPU
    Intel Core Ultra 9 185H
    Memory
    32GB LPDDR5x 7467 MT/s
    Graphics Card(s)
    NVIDIA GeForce RTX 4070 8GB GDDR6
    Monitor(s) Displays
    16.3 inch 4K+ OLED Infinity Edge Touch
    Screen Resolution
    3840 x 2400
    Hard Drives
    1 Terabyte M.2 PCIe NVMe SSD
    Cooling
    Vapor Chamber Cooling
    Mouse
    None
    Internet Speed
    960 Mbps Netgear Mesh + 2 Satellites
    Browser
    Microsoft Edge (Chromium) + Bing
    Antivirus
    Microsoft Windows Security (Defender)
    Other Info
    Microsoft 365 subscription
    Microsoft OneDrive 1TB Cloud
    Microsoft Visual Studio
    Microsoft Visual Studio Code
    Microsoft PowerToys
    Macrium Reflect X subscription
    Dell Support Assist
    Dell Command | Update
    1Password Password Manager
    Amazon Kindle for PC
    Interactive Brokers Trader Workstation
    Lightroom/Photoshop subscription
    BitLocker
    CoPilot
Hello, :-)

Normally, you wouldn't turn off BitLocker for security reasons, but there may be times you need to temporarily suspend or turn off BitLocker for the OS drive to prevent it from interfering with things like a firmware update.
This is rather a matter of opinion.

I have two laptops - main one for home use (more powerful device), supplementary one for travel

I do not see any real point in bitlocking my home use device. OK, always a risk that laptop gets stolen but very low risk.

In fact, there is not much point in bitlocking my travel laptop as it has an emmc drive and surprisingly a TP2. So drive will automatically unlock if user gets past login password.

In the end bitlocker really only protects you against user stealing drive independent of laptop, which cannot be done with emmc drive.

You can of course use a bitlocker pin (different to password pin), to provide another layer of protection if a laptop is stolen.

I also have a company issued laptop with removable SSD, and it makes sense that this is bitlocked i.e. if laptop is stolen (I travel back and forth to office with this so nore risk of theft), users could not access company data (assuming they do not get past login stage).
 

My Computer

System One

  • OS
    Windows 11 Pro + Win11 Canary VM.
    Computer type
    Laptop
    Manufacturer/Model
    ASUS Zenbook 14
    CPU
    I9 13th gen i9-13900H 2.60 GHZ
    Motherboard
    Yep, Laptop has one.
    Memory
    16 GB soldered
    Graphics Card(s)
    Integrated Intel Iris XE
    Sound Card
    Realtek built in
    Monitor(s) Displays
    laptop OLED screen
    Screen Resolution
    2880x1800 touchscreen
    Hard Drives
    1 TB NVME SSD (only weakness is only one slot)
    PSU
    Internal + 65W thunderbolt USB4 charger
    Case
    Yep, got one
    Cooling
    Stella Artois (UK pint cans - 568 ml) - extra cost.
    Keyboard
    Built in UK keybd
    Mouse
    Bluetooth , wireless dongled, wired
    Internet Speed
    900 mbs (ethernet), wifi 6 typical 350-450 mb/s both up and down
    Browser
    Edge
    Antivirus
    Defender
    Other Info
    TPM 2.0, 2xUSB4 thunderbolt, 1xUsb3 (usb a), 1xUsb-c, hdmi out, 3.5 mm audio out/in combo, ASUS backlit trackpad (inc. switchable number pad)

    Macrium Reflect Home V8
    Office 365 Family (6 users each 1TB onedrive space)
    Hyper-V (a vm runs almost as fast as my older laptop)
Brink, will Disable-Bitlocker MountPoint “ C" work offline? I have a customer that has no idea how bitlocker was even turned on so they done have a recovery key and it's not even found in the email associated with the computer.

Is there away to disable bitlocker while using boot media possibly?
 

My Computers

System One System Two

  • OS
    Windows 11 Home
    Computer type
    Laptop
    Manufacturer/Model
    Asus FX505DT-WB52
    CPU
    AMD Ryzen 5 3550H
    Motherboard
    ASUSTeK COMPUTER INC. FX505DT (FP5)
    Memory
    32 GB DDR4-3200 • CL=22 • NON-ECC • SODIMM • 260-pin • 1.2V • 2Rx8/1Rx8 • PC4-25600
    Graphics Card(s)
    4095MB NVIDIA GeForce GTX 1650 (ASUStek Computer Inc) 128MB ATI AMD Radeon Vega 8 Graphics
    Sound Card
    Realtek High Definition Audio
    Monitor(s) Displays
    Generic PnP Monitor
    Screen Resolution
    (1920x1080@60Hz)
    Hard Drives
    Samsung 860 Evo 500GB
    PSU
    Stock
    Case
    Stock
    Keyboard
    Stock
    Mouse
    Stock
    Internet Speed
    50 MBPS
    Browser
    Mozilla Firefox
    Antivirus
    Norton 360 Premium
  • Operating System
    Windows 11 Pro
    Computer type
    PC/Desktop
    Manufacturer/Model
    ASUS
    CPU
    Intel i7 8700k
    Motherboard
    TUF Z390M-PRO GAMING (WI-FI)
    Memory
    OLOy WarHawk RGB (Intel/AMD Ready) 288-Pin PC RAM DDR4 3600 (PC4 28800) 16GB
    Graphics card(s)
    PNY GeForce RTX 3060 12GB XLR8 Gaming Revel Epic-X RGB Single Fan Graphics Card
    Sound Card
    Stock
    Monitor(s) Displays
    LG UltraGear FHD 24-Inch Gaming Monitor 24GL600F-B
    Screen Resolution
    1920x1080 @ 144Hz
    Hard Drives
    PNY CS2140 500GB (SSD)

    Seagate BarraCuda 4TB (ST4000DMZ04/DM004)
    PSU
    EVGA 750 BQ 80 Plus Bronze PSU
    Case
    NZXT H510 Flow
    Cooling
    Cooler Master MA620M dual tower air cooler and SP120 RGB Elite Performance 120MM PMW Triple Fan
    Mouse
    GM702 GAMING MOUSE
    Keyboard
    PICTEK RGB Gaming Keyboard
    Internet Speed
    50 mbs
    Browser
    Mozilla Firefox
    Antivirus
    Norton 360 Deluxe
Brink, will Disable-Bitlocker MountPoint “ C" work offline? I have a customer that has no idea how bitlocker was even turned on so they done have a recovery key and it's not even found in the email associated with the computer.

Is there away to disable bitlocker while using boot media possibly?
Hello,

I'm afraid not. BitLocker will have to be unlocked for the drive before it can be turned off the same drive. :(

It may be "Device Encryption" (basically a light BitLocker) instead that is turned on by default for devices that support Modern Standby.


If they signed in with a Microsoft account, the recovery key may be available like in option one below.

 

My Computers

System One System Two

  • OS
    Windows 11 Pro for Workstations
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom self build
    CPU
    Intel i7-8700K 5 GHz
    Motherboard
    ASUS ROG Maximus XI Formula Z390
    Memory
    64 GB (4x16GB) G.SKILL TridentZ RGB DDR4 3600 MHz (F4-3600C18D-32GTZR)
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING (11GB GDDR5X)
    Sound Card
    Integrated Digital Audio (S/PDIF)
    Monitor(s) Displays
    2 x Samsung Odyssey G75 27"
    Screen Resolution
    2560x1440
    Hard Drives
    1TB Samsung 990 PRO M.2,
    4TB Samsung 990 PRO M.2,
    8TB WD MyCloudEX2Ultra NAS
    PSU
    Seasonic Prime Titanium 850W
    Case
    Thermaltake Core P3 wall mounted
    Cooling
    Corsair Hydro H115i
    Keyboard
    Logitech wireless K800
    Mouse
    Logitech MX Master 3
    Internet Speed
    1 Gbps Download and 35 Mbps Upload
    Browser
    Google Chrome
    Antivirus
    Microsoft Defender and Malwarebytes Premium
    Other Info
    Logitech Z625 speaker system,
    Logitech BRIO 4K Pro webcam,
    HP Color LaserJet Pro MFP M477fdn,
    CyberPower CP1500PFCLCD
    Galaxy S23 Plus phone
  • Operating System
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Surface Laptop 7 Copilot+ PC
    CPU
    Snapdragon X Elite (12 core) 3.42 GHz
    Memory
    16 GB LPDDR5x-7467 MHz
    Monitor(s) Displays
    15" HDR
    Screen Resolution
    2496 x 1664
    Hard Drives
    1 TB SSD
    Internet Speed
    Wi-Fi 7 and Bluetooth 5.4
    Browser
    Chrome and Edge
    Antivirus
    Windows Defender
Update yet again forced Bitlocker by itself and it can not be turned off.
I tried various combinations of the command, but neither works. :ffs:
Code:
manage-bde -autounlock -ClearAllKeys Volume C
manage-bde -autounlock -ClearAllKeys Volume
manage-bde -autounlock -ClearAllKeys C:\
manage-bde -autounlock -ClearAllKeys C
 

Attachments

  • capture_12142024_104953.webp
    capture_12142024_104953.webp
    81.4 KB · Views: 4

My Computer

System One

  • OS
    Windows 11 Home
    Computer type
    PC/Desktop
    CPU
    AMD Ryzen 5 8600G (07/24)
    Motherboard
    ASROCK B650M-HDV/M.2 3.15 (07/24)
    Memory
    2x32GB Kingston FURY DDR5 5600 MHz CL36 @4800 CL40 (07/24)
    Graphics Card(s)
    ASROCK Radeon RX 6600 Challenger D 8G @60FPS (08/24)
    Sound Card
    Creative Sound BlasterX AE-5 Plus (05/24)
    Monitor(s) Displays
    24" Philips 24M1N3200ZS/00 (05/24)
    Screen Resolution
    1920×1080@165Hz via DP1.4
    Hard Drives
    Kingston KC3000 NVMe 2TB (05/24)
    ADATA XPG GAMMIX S11 Pro 512GB (07/19)
    PSU
    Seasonic Core GM 550 Gold (04/24)
    Case
    Fractal Design Define 7 Mini with 3x Noctua NF-P14s/12@555rpm (04/24)
    Cooling
    Noctua NH-U12S with Noctua NF-P12 (04/24)
    Keyboard
    HP Pavilion Wired Keyboard 300 (07/24) + Rabalux 76017 Parker (01/24)
    Mouse
    Logitech M330 Silent Plus (04/23)
    Internet Speed
    500/100 Mbps via RouterOS (05/21) & TCP Optimizer
    Browser
    Edge & Brave for YouTube & LibreWolf for FB
    Antivirus
    NextDNS
    Other Info
    Backup: Hasleo Backup Suite (PreOS)
    Headphones: Sennheiser RS170 (09/10)
    Phone: Samsung Galaxy Xcover 7 (02/24)
    Chair: Huzaro Force 4.4 Grey Mesh (05/24)
    Notifier: Xiaomi Mi Band 9 Milanese (10/24)
    2nd Monitor: AOC G2460VQ6 @75Hz (02/19)
Update yet again forced Bitlocker by itself and it can not be turned off.
I tried various combinations of the command, but neither works. :ffs:
Code:
manage-bde -autounlock -ClearAllKeys Volume C
manage-bde -autounlock -ClearAllKeys Volume
manage-bde -autounlock -ClearAllKeys C:\
manage-bde -autounlock -ClearAllKeys C

Hello mate, :alien:

Could it be for Device Encryption instead?

 

My Computers

System One System Two

  • OS
    Windows 11 Pro for Workstations
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom self build
    CPU
    Intel i7-8700K 5 GHz
    Motherboard
    ASUS ROG Maximus XI Formula Z390
    Memory
    64 GB (4x16GB) G.SKILL TridentZ RGB DDR4 3600 MHz (F4-3600C18D-32GTZR)
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING (11GB GDDR5X)
    Sound Card
    Integrated Digital Audio (S/PDIF)
    Monitor(s) Displays
    2 x Samsung Odyssey G75 27"
    Screen Resolution
    2560x1440
    Hard Drives
    1TB Samsung 990 PRO M.2,
    4TB Samsung 990 PRO M.2,
    8TB WD MyCloudEX2Ultra NAS
    PSU
    Seasonic Prime Titanium 850W
    Case
    Thermaltake Core P3 wall mounted
    Cooling
    Corsair Hydro H115i
    Keyboard
    Logitech wireless K800
    Mouse
    Logitech MX Master 3
    Internet Speed
    1 Gbps Download and 35 Mbps Upload
    Browser
    Google Chrome
    Antivirus
    Microsoft Defender and Malwarebytes Premium
    Other Info
    Logitech Z625 speaker system,
    Logitech BRIO 4K Pro webcam,
    HP Color LaserJet Pro MFP M477fdn,
    CyberPower CP1500PFCLCD
    Galaxy S23 Plus phone
  • Operating System
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Surface Laptop 7 Copilot+ PC
    CPU
    Snapdragon X Elite (12 core) 3.42 GHz
    Memory
    16 GB LPDDR5x-7467 MHz
    Monitor(s) Displays
    15" HDR
    Screen Resolution
    2496 x 1664
    Hard Drives
    1 TB SSD
    Internet Speed
    Wi-Fi 7 and Bluetooth 5.4
    Browser
    Chrome and Edge
    Antivirus
    Windows Defender
Could it be for Device Encryption instead?
Maybe, but I do not have the option to disable it on Home, nothing in Settings.
After updating partition manager, it showed Bitlocker enabled, that alerted me.

I have managed to disable it on E via the same command, but C refuses to be decrypted.
 

Attachments

  • capture_12142024_151759.webp
    capture_12142024_151759.webp
    75.5 KB · Views: 7
  • capture_12142024_152250.webp
    capture_12142024_152250.webp
    51.3 KB · Views: 3

My Computer

System One

  • OS
    Windows 11 Home
    Computer type
    PC/Desktop
    CPU
    AMD Ryzen 5 8600G (07/24)
    Motherboard
    ASROCK B650M-HDV/M.2 3.15 (07/24)
    Memory
    2x32GB Kingston FURY DDR5 5600 MHz CL36 @4800 CL40 (07/24)
    Graphics Card(s)
    ASROCK Radeon RX 6600 Challenger D 8G @60FPS (08/24)
    Sound Card
    Creative Sound BlasterX AE-5 Plus (05/24)
    Monitor(s) Displays
    24" Philips 24M1N3200ZS/00 (05/24)
    Screen Resolution
    1920×1080@165Hz via DP1.4
    Hard Drives
    Kingston KC3000 NVMe 2TB (05/24)
    ADATA XPG GAMMIX S11 Pro 512GB (07/19)
    PSU
    Seasonic Core GM 550 Gold (04/24)
    Case
    Fractal Design Define 7 Mini with 3x Noctua NF-P14s/12@555rpm (04/24)
    Cooling
    Noctua NH-U12S with Noctua NF-P12 (04/24)
    Keyboard
    HP Pavilion Wired Keyboard 300 (07/24) + Rabalux 76017 Parker (01/24)
    Mouse
    Logitech M330 Silent Plus (04/23)
    Internet Speed
    500/100 Mbps via RouterOS (05/21) & TCP Optimizer
    Browser
    Edge & Brave for YouTube & LibreWolf for FB
    Antivirus
    NextDNS
    Other Info
    Backup: Hasleo Backup Suite (PreOS)
    Headphones: Sennheiser RS170 (09/10)
    Phone: Samsung Galaxy Xcover 7 (02/24)
    Chair: Huzaro Force 4.4 Grey Mesh (05/24)
    Notifier: Xiaomi Mi Band 9 Milanese (10/24)
    2nd Monitor: AOC G2460VQ6 @75Hz (02/19)
Maybe, but I do not have the option to disable it on Home, nothing in Settings.
After updating partition manager, it showed Bitlocker enabled, that alerted me.

I have managed to disable it on E via the same command, but C refuses to be decrypted.

It wouldn't be Device Encryption then since you don't have the setting.

Have you tried the command below?

manage-bde -off C:
 

My Computers

System One System Two

  • OS
    Windows 11 Pro for Workstations
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom self build
    CPU
    Intel i7-8700K 5 GHz
    Motherboard
    ASUS ROG Maximus XI Formula Z390
    Memory
    64 GB (4x16GB) G.SKILL TridentZ RGB DDR4 3600 MHz (F4-3600C18D-32GTZR)
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING (11GB GDDR5X)
    Sound Card
    Integrated Digital Audio (S/PDIF)
    Monitor(s) Displays
    2 x Samsung Odyssey G75 27"
    Screen Resolution
    2560x1440
    Hard Drives
    1TB Samsung 990 PRO M.2,
    4TB Samsung 990 PRO M.2,
    8TB WD MyCloudEX2Ultra NAS
    PSU
    Seasonic Prime Titanium 850W
    Case
    Thermaltake Core P3 wall mounted
    Cooling
    Corsair Hydro H115i
    Keyboard
    Logitech wireless K800
    Mouse
    Logitech MX Master 3
    Internet Speed
    1 Gbps Download and 35 Mbps Upload
    Browser
    Google Chrome
    Antivirus
    Microsoft Defender and Malwarebytes Premium
    Other Info
    Logitech Z625 speaker system,
    Logitech BRIO 4K Pro webcam,
    HP Color LaserJet Pro MFP M477fdn,
    CyberPower CP1500PFCLCD
    Galaxy S23 Plus phone
  • Operating System
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Surface Laptop 7 Copilot+ PC
    CPU
    Snapdragon X Elite (12 core) 3.42 GHz
    Memory
    16 GB LPDDR5x-7467 MHz
    Monitor(s) Displays
    15" HDR
    Screen Resolution
    2496 x 1664
    Hard Drives
    1 TB SSD
    Internet Speed
    Wi-Fi 7 and Bluetooth 5.4
    Browser
    Chrome and Edge
    Antivirus
    Windows Defender
That gives the request to clear external keys, probably for E I decrypted, but I do not know, how to apply it. 😳
Code:
C:\Windows\System32>manage-bde -off C:
BitLocker Drive Encryption: Configuration Tool version 10.0.26100
Copyright (C) 2013 Microsoft Corporation. All rights reserved.

ERROR: This volume stores external key(s) that can automatically unlock
other volumes. Before you can decrypt this volume, you must remove such
keys.

ACTIONS REQUIRED:

1. To prevent data loss, check that a recovery password or a recovery key
   exists for associated data volumes.
2. Type "manage-bde -autounlock -ClearAllKeys Volume" to remove stored
   external key(s).
EDIT: I have accessed MSA recovery keys online and removed all keys from there, no change.
 

Attachments

  • capture_12142024_152947.webp
    capture_12142024_152947.webp
    36.5 KB · Views: 5
  • capture_12142024_154238.webp
    capture_12142024_154238.webp
    44.1 KB · Views: 5
Last edited:

My Computer

System One

  • OS
    Windows 11 Home
    Computer type
    PC/Desktop
    CPU
    AMD Ryzen 5 8600G (07/24)
    Motherboard
    ASROCK B650M-HDV/M.2 3.15 (07/24)
    Memory
    2x32GB Kingston FURY DDR5 5600 MHz CL36 @4800 CL40 (07/24)
    Graphics Card(s)
    ASROCK Radeon RX 6600 Challenger D 8G @60FPS (08/24)
    Sound Card
    Creative Sound BlasterX AE-5 Plus (05/24)
    Monitor(s) Displays
    24" Philips 24M1N3200ZS/00 (05/24)
    Screen Resolution
    1920×1080@165Hz via DP1.4
    Hard Drives
    Kingston KC3000 NVMe 2TB (05/24)
    ADATA XPG GAMMIX S11 Pro 512GB (07/19)
    PSU
    Seasonic Core GM 550 Gold (04/24)
    Case
    Fractal Design Define 7 Mini with 3x Noctua NF-P14s/12@555rpm (04/24)
    Cooling
    Noctua NH-U12S with Noctua NF-P12 (04/24)
    Keyboard
    HP Pavilion Wired Keyboard 300 (07/24) + Rabalux 76017 Parker (01/24)
    Mouse
    Logitech M330 Silent Plus (04/23)
    Internet Speed
    500/100 Mbps via RouterOS (05/21) & TCP Optimizer
    Browser
    Edge & Brave for YouTube & LibreWolf for FB
    Antivirus
    NextDNS
    Other Info
    Backup: Hasleo Backup Suite (PreOS)
    Headphones: Sennheiser RS170 (09/10)
    Phone: Samsung Galaxy Xcover 7 (02/24)
    Chair: Huzaro Force 4.4 Grey Mesh (05/24)
    Notifier: Xiaomi Mi Band 9 Milanese (10/24)
    2nd Monitor: AOC G2460VQ6 @75Hz (02/19)
OK solved! I was under impression that when bitlocker service is disabled, it will not encrypt any drive.
Enabling that service allowed me to access settings and disable it. I guess I am never too old to learn.

Thank you for kicking me in the right direction. :wink:
 

Attachments

  • capture_12142024_155015.webp
    capture_12142024_155015.webp
    50 KB · Views: 4
  • capture_12142024_155026.webp
    capture_12142024_155026.webp
    38.5 KB · Views: 6

My Computer

System One

  • OS
    Windows 11 Home
    Computer type
    PC/Desktop
    CPU
    AMD Ryzen 5 8600G (07/24)
    Motherboard
    ASROCK B650M-HDV/M.2 3.15 (07/24)
    Memory
    2x32GB Kingston FURY DDR5 5600 MHz CL36 @4800 CL40 (07/24)
    Graphics Card(s)
    ASROCK Radeon RX 6600 Challenger D 8G @60FPS (08/24)
    Sound Card
    Creative Sound BlasterX AE-5 Plus (05/24)
    Monitor(s) Displays
    24" Philips 24M1N3200ZS/00 (05/24)
    Screen Resolution
    1920×1080@165Hz via DP1.4
    Hard Drives
    Kingston KC3000 NVMe 2TB (05/24)
    ADATA XPG GAMMIX S11 Pro 512GB (07/19)
    PSU
    Seasonic Core GM 550 Gold (04/24)
    Case
    Fractal Design Define 7 Mini with 3x Noctua NF-P14s/12@555rpm (04/24)
    Cooling
    Noctua NH-U12S with Noctua NF-P12 (04/24)
    Keyboard
    HP Pavilion Wired Keyboard 300 (07/24) + Rabalux 76017 Parker (01/24)
    Mouse
    Logitech M330 Silent Plus (04/23)
    Internet Speed
    500/100 Mbps via RouterOS (05/21) & TCP Optimizer
    Browser
    Edge & Brave for YouTube & LibreWolf for FB
    Antivirus
    NextDNS
    Other Info
    Backup: Hasleo Backup Suite (PreOS)
    Headphones: Sennheiser RS170 (09/10)
    Phone: Samsung Galaxy Xcover 7 (02/24)
    Chair: Huzaro Force 4.4 Grey Mesh (05/24)
    Notifier: Xiaomi Mi Band 9 Milanese (10/24)
    2nd Monitor: AOC G2460VQ6 @75Hz (02/19)
That gives the request to clear external keys, probably for E I decrypted, but I do not know, how to apply it. 😳
Code:
C:\Windows\System32>manage-bde -off C:
BitLocker Drive Encryption: Configuration Tool version 10.0.26100
Copyright (C) 2013 Microsoft Corporation. All rights reserved.

ERROR: This volume stores external key(s) that can automatically unlock
other volumes. Before you can decrypt this volume, you must remove such
keys.

ACTIONS REQUIRED:

1. To prevent data loss, check that a recovery password or a recovery key
   exists for associated data volumes.
2. Type "manage-bde -autounlock -ClearAllKeys Volume" to remove stored
   external key(s).
EDIT: I have accessed MSA recovery keys online and removed all keys from there, no change.

Try running the PowerShell command below to clear all automatic unlocking keys stored on the current computer.

Clear-BitLockerAutoUnlock


Afterwards, see if it'll let you run the manage-bde -off C: command.
 

My Computers

System One System Two

  • OS
    Windows 11 Pro for Workstations
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom self build
    CPU
    Intel i7-8700K 5 GHz
    Motherboard
    ASUS ROG Maximus XI Formula Z390
    Memory
    64 GB (4x16GB) G.SKILL TridentZ RGB DDR4 3600 MHz (F4-3600C18D-32GTZR)
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING (11GB GDDR5X)
    Sound Card
    Integrated Digital Audio (S/PDIF)
    Monitor(s) Displays
    2 x Samsung Odyssey G75 27"
    Screen Resolution
    2560x1440
    Hard Drives
    1TB Samsung 990 PRO M.2,
    4TB Samsung 990 PRO M.2,
    8TB WD MyCloudEX2Ultra NAS
    PSU
    Seasonic Prime Titanium 850W
    Case
    Thermaltake Core P3 wall mounted
    Cooling
    Corsair Hydro H115i
    Keyboard
    Logitech wireless K800
    Mouse
    Logitech MX Master 3
    Internet Speed
    1 Gbps Download and 35 Mbps Upload
    Browser
    Google Chrome
    Antivirus
    Microsoft Defender and Malwarebytes Premium
    Other Info
    Logitech Z625 speaker system,
    Logitech BRIO 4K Pro webcam,
    HP Color LaserJet Pro MFP M477fdn,
    CyberPower CP1500PFCLCD
    Galaxy S23 Plus phone
  • Operating System
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Surface Laptop 7 Copilot+ PC
    CPU
    Snapdragon X Elite (12 core) 3.42 GHz
    Memory
    16 GB LPDDR5x-7467 MHz
    Monitor(s) Displays
    15" HDR
    Screen Resolution
    2496 x 1664
    Hard Drives
    1 TB SSD
    Internet Speed
    Wi-Fi 7 and Bluetooth 5.4
    Browser
    Chrome and Edge
    Antivirus
    Windows Defender
OK solved! I was under impression that when bitlocker service is disabled, it will not encrypt any drive.
Enabling that service allowed me to access settings and disable it. I guess I am never too old to learn.

Thank you for kicking me in the right direction. :wink:
Ah, yep that would be a cause. :shawn:

You'd think it would have given a disabled service error though.
 

My Computers

System One System Two

  • OS
    Windows 11 Pro for Workstations
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom self build
    CPU
    Intel i7-8700K 5 GHz
    Motherboard
    ASUS ROG Maximus XI Formula Z390
    Memory
    64 GB (4x16GB) G.SKILL TridentZ RGB DDR4 3600 MHz (F4-3600C18D-32GTZR)
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING (11GB GDDR5X)
    Sound Card
    Integrated Digital Audio (S/PDIF)
    Monitor(s) Displays
    2 x Samsung Odyssey G75 27"
    Screen Resolution
    2560x1440
    Hard Drives
    1TB Samsung 990 PRO M.2,
    4TB Samsung 990 PRO M.2,
    8TB WD MyCloudEX2Ultra NAS
    PSU
    Seasonic Prime Titanium 850W
    Case
    Thermaltake Core P3 wall mounted
    Cooling
    Corsair Hydro H115i
    Keyboard
    Logitech wireless K800
    Mouse
    Logitech MX Master 3
    Internet Speed
    1 Gbps Download and 35 Mbps Upload
    Browser
    Google Chrome
    Antivirus
    Microsoft Defender and Malwarebytes Premium
    Other Info
    Logitech Z625 speaker system,
    Logitech BRIO 4K Pro webcam,
    HP Color LaserJet Pro MFP M477fdn,
    CyberPower CP1500PFCLCD
    Galaxy S23 Plus phone
  • Operating System
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Surface Laptop 7 Copilot+ PC
    CPU
    Snapdragon X Elite (12 core) 3.42 GHz
    Memory
    16 GB LPDDR5x-7467 MHz
    Monitor(s) Displays
    15" HDR
    Screen Resolution
    2496 x 1664
    Hard Drives
    1 TB SSD
    Internet Speed
    Wi-Fi 7 and Bluetooth 5.4
    Browser
    Chrome and Edge
    Antivirus
    Windows Defender

Latest Support Threads

Back
Top Bottom