What to do when you asked to turn BitLocker off to run Sysprep? Try the 4 methods to remove BitLocker for Sysprep running.
I am trying to make a new image of some laptops we have to push out and am trying to run sysprep to prep the image. Each time I've tried running sysprep the log returns with the error that BitLocker is on. Just like this:
Error SYSPRP BitLocker-Sysprep: BitLocker is on for the OS volume. Turn BitLocker off to run Sysprep. (0x80310039)
Error [0x0f0082] SYSPRP ActionPlatform::LaunchModule: Failure occurred while executing ‘ValidateBitLockerState’ from C:\Windows\System32\BdeSysprep.dll
- Question from Reddit
If you are creating a new image of your computer but required that to turn BitLocker off to run Sysprep, what should you do? If you have no idea, we will share it for you. Generally, BitLocker can be disabled using 3 modes in the Imaging computer. In the following section, we would like to guide you how to turn off BitLocker to run Sysprep.
To deal with Sysprep Bitlocker error, you can try the following 4 methods to turn off BitLocker to run Sysprep
To turn off BitLocker to run Sysprep, AOMEI Partition Assistant is an intelligent choice. With user-friendly interface, you can disable BitLocker in Windows PC within only 3 steps. Most importantly, this multifunctional software offers you easy ways to manage the BitLocker.
You can use it to back up recovery key, change BitLocker password, easily lock or unlock BitLocker without a password and recovery key as well. For Windows 11/10 Home users, this tool also allows them to enable BitLocker.
Step 1. Locate the encrypted drive you wish to decrypt and choose the option "Turn off BitLocker".
Step 2. There are 2 available methods for decrypting the drive: Use a password for decryption or Use a recovery key for decryption. Please select the appropriate method based on your requirements.
If you opt for "Use a password to decrypt the drive," enter the correct password and then click the "Decrypt" button.
If you choose "Use a recovery key to decrypt the drive," input the recovery key saved in the TXT file or printed when you initially encrypted the drive, and then click the "Decrypt" button.
Step 3. Subsequently, the decryption process will commence, and it may take some time to complete. During this period, it is essential not to close the program, eject the drive, or power off the system.
Once the decryption process concludes, click "Completed". At this point, the BitLocker on the drive is successfully decrypted.
Before beginning, please ensure you have administrator credentials to disable BitLocker encryption. Then, you can follow these steps to disable BitLocker encryption in GUI mode:
Step 1. Click Start, go to Control Panel, select System and Security.
Step 2. Choose BitLocker Drive Encryption.
Step 3. Locate the drive for which you want to turn off BitLocker, and click Turn Off BitLocker.
A message will appear, indicating that the drive will be decrypted, and decryption may take some time. Click Turn off BitLocker/Decrypt the drive to proceed.
Step 4. It may take some time to decrypt the drive and remove BitLocker protection.
Or, if you are familiar enough with commands, you can resolve this error by using PowerShell to disable encryption for the Windows system volume.
Step 1. Run PowerShell, and input Disable-Bitlocker –MountPoint “C:”
Step 2. Wait for the drive to finish decrypting. Then verify the status by typing: manage-bde -status
Now, you can see the drive status to change to:
Conversion Status: Fully Decrypted
Protection Status: Protection Off
Afterward, you can check whether you successfully turn BitLocker off to run Sysprep or not.
For those who prefer using commands, we'd like to introduce an alternative method: using Command Prompt to disable BitLocker to run Sysprep.
Step 1. Click the Search icon on the taskbar and type "cmd". Choose the "Command Prompt" app to open it.
Step 2. Right-click on the Command Prompt app and select "Run as administrator". If prompted for confirmation or a password, provide the necessary credentials.
Step 3. Now, verify the BitLocker encryption status on your system, and execute the following command: manage-bde -status. Ensure that the outcomes for the specified drives (C:, D:, etc.) exhibit the following:
If the result indicates “Percentage Encrypted: 100.0%,” decrypt the BitLocker for the relevant drives using the provided commands: manage-bde -off , for example, manage-bde -off C: or “manage-bde -unlock ” and then press the Enter key.
Step 4. Afterward, check the BitLocker status after disabling using the command manage-bde -status and confirm that the "Percentage Encrypted: 0.0%” before proceeding with the image creation process.
By following the steps, you can use the Command Prompt to fix the Sysprep fails BitLocker issue. Ensure that you run CMD as an administrator and input the correct drive letter for successful execution.
The 4 ways to turn Bitlocker off to run Sysprep have proven useful in fixing Sysprep fails BitLocker issue. For long-term benefits, it is recommended to utilize AOMEI Partition Assistant for effectively managing your BitLocker.
In addition to its high efficiency in BitLocker management, AOMEI Partition Assistant also supports tasks such as cloning disks, OS migration, and rebuilding MBR. It is powerful in functions like storage expansion, converting system disks, partition management, and more. Whether your needs are straightforward or complex, this tool is designed to provide effective solutions for you. If you are using Windows Server, this software also provides you with AOMEI Partition Assistant Server for a compatible environment.
Sysprep fails because BitLocker encryption on the OS volume prevents it from running. The error suggests turning off BitLocker before proceeding.
You can disable BitLocker through one of the following methods:
Using AOMEI Partition Assistant for a guided interface. Disabling it via Windows GUI through the Control Panel. Running PowerShell commands like Disable-BitLocker –MountPoint "C:". Using Command Prompt with commands such as manage-bde -off C:.
Open Control Panel > System and Security > BitLocker Drive Encryption. Select the drive, click Turn Off BitLocker, and wait for decryption to complete.
Use the command manage-bde -status in Command Prompt or PowerShell. Confirm that "Percentage Encrypted" is 0.0% and "Protection Status" is off.
AOMEI Partition Assistant is a user-friendly tool that supports disabling BitLocker, managing encryption keys, and other advanced partition tasks.