Lock-Bit
Locker
Syntax
Lock-BitLocker
[-MountPoint] <String[]>
[-ForceDismount]
[-WhatIf]
[-Confirm]
[<CommonParameters>]
Description
The Lock-BitLocker cmdlet prevents access to all encrypted data on a volume that uses BitLocker Drive Encryption. You can use the Unlock-BitLocker cmdlet to restore access.
You can specify a volume to lock by drive letter, or you can specify a BitLocker volume object. This cmdlet cannot lock a volume that hosts the operating system. If you attempt to lock an already locked volume, this cmdlet does nothing.
For an overview of BitLocker, see BitLocker Drive Encryption Overview on TechNet.
Examples
Example 1: Lock a volume
PS C:\> Lock-Volume -MountPoint "E:" -ForceDismount
This command locks the BitLocker volume specified with the MountPoint parameter. The command uses the ForceDismount parameter, so the cmdlet attempts to lock the volume even if it is in use.
Required Parameters
Specifies an array of drive letters or BitLocker volume objects. The cmdlet attempts to lock the volumes specified. To obtain a BitLocker volume object, use the Get-BitLockerVolume cmdlet.
Type: | String[] |
Position: | 0 |
Default value: | None |
Accept pipeline input: | True (ByPropertyName, ByValue) |
Accept wildcard characters: | False |
Optional Parameters
Prompts you for confirmation before running the cmdlet.
Type: | SwitchParameter |
Aliases: | cf |
Position: | Named |
Default value: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Indicates that the cmdlet attempts to lock a drive even if the drive is in use.
Type: | SwitchParameter |
Aliases: | fd |
Position: | Named |
Default value: | None |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Shows what would happen if the cmdlet runs. The cmdlet is not run.
Type: | SwitchParameter |
Aliases: | wi |
Position: | Named |
Default value: | False |
Accept pipeline input: | False |
Accept wildcard characters: | False |
Inputs
BitLockerVolume[], String[]
Outputs
BitLockerVolume[]