Scripting Question

How to use k1000 to disable and enable bitlocker for bios updates?

01/17/2018 2360 views
Pretty much it’s all in the title. 

I see people made a script to do it, but how? 
0 Comments   [ + ] Show comments


Community Chosen Answer

Microsoft has a script to suspend bitlocker

You may want to deploy it via Scripting with the KACE agent.

You might want to register, post and vote here:

The KACE agent can also push Powershell scripts, see Method 3 here:
Answered 01/17/2018 by: Channeler
Red Belt

  • Hi channeler.

    I did not mention that I have already tried using a batch script and PowerShell script using the commands that MS provide to manage BitLocker.

    If I run the batch file or PowerShell script manually on a PC, it works. When done with Kace it doesn’t.

    Is there anyone there that has actually done this with KACE?
    • Have you tried the Second Method described here:

      That is the one I use.
      • The second method works fine for all my other PowerShell scripts. Tried method 1 and it works for this one. I guess the way that method 1 works, PowerShell is able to use the BitLocker module.

All Answers

manage-bde can do this. Really simple to script.

I use sysnative because the K1000 Agent is 32-bit so sysnative redirects to the correct system directory.

To reenable, change '-disable' to '-enable'. 
Answered 01/26/2018 by: tshupp
2nd Degree Black Belt

Don't be a Stranger!

Sign up today to participate, stay informed, earn points and establish a reputation for yourself!

Sign up! or login