Policy

Allow offline scan from trusted Windows Recovery Environment

Microsoft Windows

Back to RecoveryBack to main
Allow offline scan from trusted Windows Recovery Environment
Jump to overview

Policy overview

Key metadata and intent for this policy.

Computer
Category
System > Recovery
Supported on
At least Windows Server 2016, Windows 10

Supported OS tags: Windows10, Windows10RT, Windows11, WindowsServer2016

Requirements: Windows 10 Description: This policy setting controls whether offline scan should be allowed from a trusted Windows Recovery Environment. If you enable this policy setting, offline scan will execute without prompting for BitLocker recovery key, as long as the Windows Recovery Environment is trusted by BitLocker. If you disable or do not configure this policy setting, offline scan will prompt the user for BitLocker recovery key to unlock the OS volume. If user skips unlock the OS volume, offline scan will not execute. This is the default setting.

Internal name
AllowTrustedOfflineScan
Policy ID
2c4af1fc7a78
Elements
0

Registry values

How enabled and disabled states update the registry.

ScopeRegistry locationTypeEnabled valueDisabled valueCopy
Computer
Path
SOFTWARE\Policies\Microsoft\Windows\WinRE
Value name
AllowTrustedOfflineScan
REG_DWORD
HKLM
1
HKLM
0
Registry location
Type REG_DWORD · Computer
Path
SOFTWARE\Policies\Microsoft\Windows\WinRE
Value name
AllowTrustedOfflineScan
Hive
HKLM
Enabled value
1
Disabled value
0

Policy elements

Inputs and configuration options exposed by this policy.

This policy has no additional user input fields.