Categories About Us Contact Us Become a Member

How to fix manage-bde error 0x80070005 (access denied)

This nearly always means the command prompt was not run as administrator. manage-bde needs elevation to read or change BitLocker. Running it elevated fixes it. Jump to your situation below or work through the methods in order.

By Neeraj Singh ~4 min Updated Jun 2026 90% found this helpful
Error message
ERROR: 0x80070005. Access is denied.
Summary

When manage-bde returns 0x80070005 (access denied), the cause is almost always that the command prompt is not elevated. manage-bde reads and changes BitLocker, which requires administrator rights, so a normal command prompt is refused. The fix is simply to open Command Prompt as administrator and run the command again. Less often, the account genuinely lacks administrator rights, User Account Control or a security tool is blocking the action, or a policy restricts BitLocker management. So if an elevated prompt still fails, confirm the account is an administrator, check UAC and any endpoint security, and review BitLocker policy on a managed machine. In the vast majority of cases, Run as administrator is the entire fix.

What this error means

BitLocker protects whole drives, so reading or changing its state is a privileged action. manage-bde therefore needs administrator rights to do anything. Access denied is Windows refusing the command because the prompt running it is not elevated.

That is why the fix is usually trivial: open the prompt as administrator. The handful of other causes, a non-admin account, UAC or security software blocking it, or a restrictive policy on a work machine, only matter when an already-elevated prompt still returns the error.

Common causes

The command prompt is not run as administrator.
The signed-in account is not an administrator.
User Account Control or security software is blocking it.
A policy restricts BitLocker management on a managed PC.
Expert insight

“Nine times out of ten this is the simplest fix on the site: you ran manage-bde in a normal command prompt and Windows said no. Close it, open Command Prompt as administrator, run the exact same command, done. If it still says access denied after that, then we look at whether your account is actually an admin, or whether antivirus or a work policy is in the way. But start by right-clicking and choosing Run as administrator.”

How to fix it

Method 1

Run Command Prompt as administrator

1Press Start, type cmd, right-click Command Prompt and choose Run as administrator.
2Approve the UAC prompt.
3Run your manage-bde command again; access denied should be gone.
Method 2

Confirm your account is an administrator

1Check that the account you are signed in with has administrator rights (Settings, Accounts).
2If not, sign in with an administrator account or have one run the command.
3Standard accounts cannot manage BitLocker.
Method 3

Check UAC and security software

1If an elevated prompt still fails, temporarily test with endpoint security paused.
2Some tools block BitLocker changes.
3Re-enable protection after testing.
Method 4

Review policy on a managed PC

1On a work or domain machine, a policy may restrict BitLocker management.
2Ask your administrator whether such a policy applies.
3They can run the command or adjust the policy.

manage-bde 0x80070005 is almost always a non-elevated prompt, so open Command Prompt as administrator and run the command again, which fixes the vast majority of cases. Only if an elevated prompt still fails should you check whether the account is an admin, or whether security software or a policy is blocking it.

Frequently asked questions

What does manage-bde error 0x80070005 mean?
Access denied. It almost always means the command prompt was not run as administrator. manage-bde needs administrator rights to read or change BitLocker.
How do I fix it?
Open Command Prompt as administrator: press Start, type cmd, right-click Command Prompt, choose Run as administrator, approve the UAC prompt, and run your manage-bde command again.
It still fails after running as administrator
Confirm your account actually has administrator rights, test with endpoint security temporarily paused, and on a managed PC check whether a policy restricts BitLocker management.
Why does manage-bde need admin rights?
Because it reads and changes BitLocker, which protects whole drives. That is a privileged operation, so Windows requires an elevated prompt to perform it.
Can a standard user run manage-bde?
No. A standard account cannot manage BitLocker. Sign in with an administrator account, or have an administrator run the command for you.
Could antivirus cause this?
Occasionally. Some endpoint security tools block BitLocker changes. If an elevated admin prompt still returns access denied, test with the security tool paused, then re-enable it.

Still not working?

If an elevated administrator prompt still returns access denied on a personal PC, a corrupt security policy or a damaged user profile can be to blame. Testing the command from another administrator account helps isolate it. You can also submit your error to us for a tailored fix.

Was this fix helpful? Thanks for your feedback!