< Back
Lock-BitLocker
Post
NAME Lock-BitLocker
SYNOPSIS
Prevents access to encrypted data on a BitLocker volume.
SYNTAX
Lock-BitLocker [-MountPoint] <String[]> [-ForceDismount] [-Confirm] [-WhatIf] [<CommonParameters>]
DESCRIPTION
The Lock-BitLocker cmdlet prevents access to all encrypted data on a volume that uses BitLocker Drive Encryption. You can use the Unlock-BitLocker
cmdlet to restore access.
You can specify a volume to lock by drive letter, or you can specify a BitLocker volume object. This cmdlet cannot lock a volume that hosts the
operating system. If you attempt to lock an already locked volume, this cmdlet does nothing.
For an overview of BitLocker, see BitLocker Drive Encryption Overview (http://technet.microsoft.com/en-us/libr ... 32774.aspx) on TechNet.
PARAMETERS
-ForceDismount [<SwitchParameter>]
Indicates that the cmdlet attempts to lock a drive even if the drive is in use.
Required? false
Position? named
Default value false
Accept pipeline input? false
Accept wildcard characters? false
-MountPoint <String[]>
Specifies an array of drive letters or BitLocker volume objects. The cmdlet attempts to lock the volumes specified. To obtain a BitLocker
volume object, use the Get-BitLockerVolume cmdlet.
Required? true
Position? 1
Default value
Accept pipeline input? True (ByValue, ByPropertyName)
Accept wildcard characters? false
-Confirm [<SwitchParameter>]
Prompts you for confirmation before running the cmdlet.
Required? false
Position? named
Default value false
Accept pipeline input? false
Accept wildcard characters? false
-WhatIf [<SwitchParameter>]
Shows what would happen if the cmdlet runs. The cmdlet is not run.
Required? false
Position? named
Default value false
Accept pipeline input? false
Accept wildcard characters? false
<CommonParameters>
This cmdlet supports the common parameters: Verbose, Debug,
ErrorAction, ErrorVariable, WarningAction, WarningVariable,
OutBuffer, PipelineVariable, and OutVariable. For more information, see
about_CommonParameters (http://go.microsoft.com/fwlink/?LinkID=113216).
INPUTS
BitLockerVolume[], String[]
OUTPUTS
BitLockerVolume[]
Example 1: Lock a volume
PS C:\\> Lock-Volume -MountPoint "E:" -ForceDismount
This command locks the BitLocker volume specified with the Mount parameter. The command uses the ForceDismount parameter, so the cmdlet attempts
to lock the volume even if it is in use.
RELATED LINKS
Online Version: http://go.microsoft.com/fwlink/?linkid=287655
Disable-BitLocker
Enable-BitLocker
Resume-BitLocker
Suspend-BitLocker
Unlock-BitLocker
Get-BitLockerVolume
SYNOPSIS
Prevents access to encrypted data on a BitLocker volume.
SYNTAX
Lock-BitLocker [-MountPoint] <String[]> [-ForceDismount] [-Confirm] [-WhatIf] [<CommonParameters>]
DESCRIPTION
The Lock-BitLocker cmdlet prevents access to all encrypted data on a volume that uses BitLocker Drive Encryption. You can use the Unlock-BitLocker
cmdlet to restore access.
You can specify a volume to lock by drive letter, or you can specify a BitLocker volume object. This cmdlet cannot lock a volume that hosts the
operating system. If you attempt to lock an already locked volume, this cmdlet does nothing.
For an overview of BitLocker, see BitLocker Drive Encryption Overview (http://technet.microsoft.com/en-us/libr ... 32774.aspx) on TechNet.
PARAMETERS
-ForceDismount [<SwitchParameter>]
Indicates that the cmdlet attempts to lock a drive even if the drive is in use.
Required? false
Position? named
Default value false
Accept pipeline input? false
Accept wildcard characters? false
-MountPoint <String[]>
Specifies an array of drive letters or BitLocker volume objects. The cmdlet attempts to lock the volumes specified. To obtain a BitLocker
volume object, use the Get-BitLockerVolume cmdlet.
Required? true
Position? 1
Default value
Accept pipeline input? True (ByValue, ByPropertyName)
Accept wildcard characters? false
-Confirm [<SwitchParameter>]
Prompts you for confirmation before running the cmdlet.
Required? false
Position? named
Default value false
Accept pipeline input? false
Accept wildcard characters? false
-WhatIf [<SwitchParameter>]
Shows what would happen if the cmdlet runs. The cmdlet is not run.
Required? false
Position? named
Default value false
Accept pipeline input? false
Accept wildcard characters? false
<CommonParameters>
This cmdlet supports the common parameters: Verbose, Debug,
ErrorAction, ErrorVariable, WarningAction, WarningVariable,
OutBuffer, PipelineVariable, and OutVariable. For more information, see
about_CommonParameters (http://go.microsoft.com/fwlink/?LinkID=113216).
INPUTS
BitLockerVolume[], String[]
OUTPUTS
BitLockerVolume[]
Example 1: Lock a volume
PS C:\\> Lock-Volume -MountPoint "E:" -ForceDismount
This command locks the BitLocker volume specified with the Mount parameter. The command uses the ForceDismount parameter, so the cmdlet attempts
to lock the volume even if it is in use.
RELATED LINKS
Online Version: http://go.microsoft.com/fwlink/?linkid=287655
Disable-BitLocker
Enable-BitLocker
Resume-BitLocker
Suspend-BitLocker
Unlock-BitLocker
Get-BitLockerVolume