Do not allow encryption on all NTFS volumes
Jump to overview

Policy overview

Key metadata and intent for this policy.

Computer
Category
System > Filesystem > NTFS
Supported on
At least Windows Server 2008 R2 or Windows 7

Supported OS tags: Windows10, Windows10RT, Windows11, Windows7, Windows8, Windows81, WindowsRT, WindowsRT81, WindowsServer2008, WindowsServer2012, WindowsServer2012R2, WindowsServer2016

Encryption can add to the processing overhead of filesystem operations. Enabling this setting will prevent access to and creation of encrypted files. A reboot is required for this setting to take effect

Internal name
DisableEncryption
Policy ID
ce3fe4a1254a
Elements
0

Registry values

How enabled and disabled states update the registry.

ScopeRegistry locationTypeEnabled valueDisabled valueCopy
Computer
Path
System\CurrentControlSet\Policies
Value name
NtfsDisableEncryption
REG_DWORD
HKLM
1
HKLM
0
Registry location
Type REG_DWORD · Computer
Path
System\CurrentControlSet\Policies
Value name
NtfsDisableEncryption
Hive
HKLM
Enabled value
1
Disabled value
0

Policy elements

Inputs and configuration options exposed by this policy.

This policy has no additional user input fields.