In this article, we will learn how to enable or disable Encrypting File System (EFS) feature on Windows 11. There are different ways for you, and you can choose one of them based on your needs. You can continue to read this article.
Table of Contents
What is Encrypting File System?
Encrypting File System is a feature in the Windows operating system which permits you to easily encrypt and decrypt files on NTFS drives. After encrypting your files with this tool, other people can’t access them unless they have a password.
This feature allows you to encrypt certain folders instead of entire hard drive partitions. Furthermore, if you move a file to an EFS-encrypted folder, it will automatically be encrypted.
Enable or Disable Encrypting File System
How do I enable or disable encryption File System on Windows 11? There are different ways for you.
Via Command Prompt
Type cmd in the Search box and click on Run as administrator.
To enable the EFS feature, enter the below command and press Enter:
fsutil behavior set disableencryption 0
To disable the encrypting file system feature, enter the below command and press Enter:
fsutil behavior set disableencryption 1
Enable/Disable Encrypting File System via Registry Editor
Search Registry editor and run as administrator.
Go to the following path.
Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Policies
Right-click on any space from your right side and choose New and then DWORD (32-bit) Value.
Name it as NtfsDisableEncryption and press Enter.
To enable encryption file system, double-click on the NtfsDisableEncryption value, set its Value data to 0, and then hit ok.
To disable encryption file system, double-click on the NtfsDisableEncryption value, set its Value data to 1, and then hit ok.
Enable/Disable Encryption File System via Local Group Policy Editor
Search Edit group policy and open it or type gpedit.msc in the Run dialog box to open it.
Go to the following path.
Computer Configuration\Administrative Templates\System\Filesystem\NTFS
On your right-hand side, double-click on the “Do not allow encryption on all NTFS volumes” option.
To enable it, choose Not Configured or Disabled. To disable it, choose the Enable option.
Enable or Disable Encrypting File System via Local Security Policy
Search local security policy and open it. Or type secpol.msc in run box to open local security policy.
Go to the following path.
Security Settings\Public Key Policies
Find and right-click on Encrypting File System and choose Properties.
Select the General tab and select Allow under the File encryption using Encrypting File System (EFS) section and choose Apply and OK.
To disable the encrypting file system, select Not defined or don’t allow.
Enable\Disable Encrypting File System via Services
Press the Windows + R keys to launch the Run box. Type services.msc and hit Enter.
Find and right-click on the Encrypting File System (EFS) service name to choose Start.
Or double-click it to open service properties. Click the Startup type drop-down menu to choose Automatic. Choose Apply and then select ok to save these changes.
To disable Encrypting File System vis service, select the Disabled option on the Startup type drop-down menu. Choose Apply and then ok to apply these changes.
