topic What happens to BitLocker encryption after disabling Full Disk Encryption? in Endpoint

What happens to BitLocker encryption after disabling Full Disk Encryption?

faust — Wed, 18 Mar 2026 08:56:15 GMT

Hi CheckMates,

I have a question regarding the interaction between BitLocker and Harmony Endpoint Full Disk Encryption (FDE) on Windows devices.

Scenario:

A Windows device was originally encrypted using BitLocker.
Later, we enabled Full Disk Encryption (FDE) via Harmony Endpoint (EPMAAS).
According to documentation, Harmony FDE can take over management of BitLocker.

If we later disable the Full Disk Encryption policy in Harmony Endpoint, what happens to the disk encryption status on the device? Will the disk be decrypted after disabling FDE or will BitLocker management be handed back to the device, and the disk remain encrypted with BitLocker?

I want to understand if disabling FDE will leave the device unencrypted, or if BitLocker will continue to protect the disk as before.

Re: What happens to BitLocker encryption after disabling Full Disk Encryption?

the_rock — Wed, 18 Mar 2026 13:40:01 GMT

Im fairly sure BitLocker would protect the device, as before, if you disable FDE.

Re: What happens to BitLocker encryption after disabling Full Disk Encryption?

the_rock — Wed, 18 Mar 2026 18:11:57 GMT

@faust To be sure, I would definitely open TAC case to get an official answer.

Re: What happens to BitLocker encryption after disabling Full Disk Encryption?

faust — Wed, 18 Mar 2026 18:16:47 GMT

Thanks for the tip — much appreciated!

Re: What happens to BitLocker encryption after disabling Full Disk Encryption?

the_rock — Wed, 18 Mar 2026 18:21:01 GMT

Of course, any time!

Re: What happens to BitLocker encryption after disabling Full Disk Encryption?

lluner — Thu, 19 Mar 2026 01:58:00 GMT

@faust

In my tests, the interesting thing is whether you use BitLocker or FDE. I've had problems with BitLocker enabled, and when I tried to remove the endpoint, it caused problems with the operating system on Windows 11. Therefore, if you're going to use FDE, disable BitLocker and be careful when removing the antivirus with BitLocker enabled; I don't know how the new version 89 works.