Workaround: BitLocker prevents Sysprep on VM in 24H2

I don't know if this is a Windows issue, or a Dell issue, but this is still happening in April 2026, reporting it's off in the GUI, while it's actually on, needing a command to turn it off

@IrishDr - When we discovered (in 24H2) that Microsoft enabled automatic BitLocker encryption in a VM when both Secure Boot and TPM are enabled, DIA was updated so that when the image capture process was initiated, it checks for BitLocker encryption and then immediately begins decryption, aiming to complete before Sysprep runs. We've seen instances where when a VM disk is very large or when the VM is resource constrained, BitLocker decryption takes longer than allocated for the DIA auto-capture process and Sysprep fails. This is noted in the known issues for the current release here >> Image Assist Version 11.2.0 Release Notes | Dell US. You can check the status of the decryption process by opening a CMD and running 'manage-bde -status'. Once it's complete, you can rerun DIA and the capture should complete.

@DELL-Tyler M 

Test reply test reply

Tyler,

You nailed it. My image was failing with SysPrep error and the log mentioned the Bitlocker. First I checked in the control panel to see if Bitlocker is ON/OFF and strangely the control panel shows it as OFF.

I then ran the command to check status "​manage-bde -status​" and in mentioned Encryption was active. Its weird that windows control panel wont show it as active when it actually is active.

I ran the command ​"manage-bde -off C:​" like you mentioned and checked the status until if was fully decrypted. My image is finally capturing.

Thanks mate!

 Thank you, this solution worked out great! This thread should be marked "problem solved".