Skip to main content


Disable Encrypted File System In Windows 10


From Windows 2000 onwards on supported editions, a native encryption tool named Encrypting File System (EFS), allows you to securely encrypt files and folders, thus keep them safe from unauthorized access. This also means that other users sharing your PC, can do the very same and encrypt as many files as they please. As such, In this tutorial, I will show you how to securely disable EFS In Windows 10.


Before I begin, here's what I'm referring to. When you encrypt a file or folder using the Windows built-In Encrypting File System tool, It's Identified as such (encrypted), by the green text In the file/folder name as per the Image below.



The problem Is, If other users have encrypted your files & folders and your user account password Is reset (Intentional or otherwise), you'll lose access to every EFS encrypted file & folder on your computer. The same applies If the EFS file encryption certificate and key corrupts.

If you do not Intend to utilize the Encrypting File System and want It disabled altogether, I will demonstrate how to do this, by using the Windows built-In Local Security Policy. Do note, that EFS Is only supported In Windows 10 Pro, Enterprise and Education editions. So without further delay, let's rip Into this tutorial.

Step One:

To access the Local Security Policy, open the Run menu, enter secpol.msc and hit OK.


Step Two:

Next, navigate to the following directory.
Security Settings -> Public Key Policies -> Encrypting File System

Then right-click on Encrypting File System, and hit Properties.


Step Three:

Select the Don't allow radio button, and click OK to finalize the process.


Step Four:

EFS Is now securely disabled. Let's put It to the test, by attempting to encrypt a file. In my case, I've right-clicked my file named Windows 10 Tips, and hit Properties.


Step Five:

Now simply click the Advanced button as shown below.


Step Six:

Check the Encrypt contents to secure data checkbox, and then hit OK.



Step Seven:

To finish off the encryption, hit Apply and OK.


Step Eight:

As you can see and as expected, an error message of This machine Is disabled for file encryption has been returned. Perfect! Essentially, users cannot use EFS to encrypt files & folders.


Final Thoughts:

Whilst the Encrypting File System (EFS), serves It's purpose quite well to prevent unauthorized access to your files & folders via other user accounts, It can also work against you, If your password Is reset or the EFS file encryption certificate and key corrupts, disabling It altogether, prevents this In It's entirety.



Comments

Popular posts from this blog

How To Decode The Windows 10 Product Key

Every Windows 10 operating system that's Installed and activated on the computer, has what's called a Product Key, that Is either pre-Installed by the manufacturer, or added by the end user when formatting their PC. In order to have a fully-functional OS, It must contain a valid Product Key. Whilst there are many tools that can extract It from the operating system, In this tutorial, I will show you how to manually decode the Product Key.

How To Rename Any Power Plan In Windows 10

In terms of managing and controlling the way your computer utilizes power during It's computing operations, Windows has built-In power plans, that are basically a collection of hardware and system settings. By default, there are three In total, namely Balanced, Power Saver and High Performance. Whilst you can change the plan Itself, there's no option to do the same with It's name, hence In this tutorial, I will show you how to rename any power plan In Windows 10.

How To Create A Fake File Of Any File Size

Depending on your business environment or Individual requirements, sometimes there Is the need to test files of a given capacity. Such tests can Include Identifying how well your hard disks perform under heavy read/write operations, or to establish whether files can be securely deleted beyond recovery. Whatever the reason may be, In this tutorial, I will show you how to create a fake file of any file size.