Skip to main content


How To Disable NTFS File Encryption


From Windows 2000 onward on supported editions, a native encryption tool named Encrypting File System (EFS), allows you to securely encrypt files and folders, thus keep them safe from unauthorized access. This also means that other users sharing your PC, can do the very same and encrypt as many files as they please. As such, In this tutorial, I will show you how to disable NTFS file encryption In Windows 10.


Before I begin, here's what I'm referring to In terms of encrypting files and folders using the Windows native Encrypting File System (EFS) utility. Right-click a file/folder, select Properties > Advanced, and simply check the Encrypt contents to secure data checkbox as shown below.


The files/folders will now be encrypted, and Identified as such (encrypted), by the green text In the file/folder name as per the Image below.


The problem Is, If other users have encrypted your files & folders and your user account password Is reset (Intentional or otherwise), you'll lose access to every EFS encrypted file & folder on your computer. The same applies If the EFS file encryption certificate and key corrupts.

To prevent users (who have physical access to your PC) from encrypting your files and folders, I will demonstrate how to securely disable NTFS file encryption, by using the good old Group Policy Editor. Do note that the GPE Is only available In Windows 10 Pro, Enterprise and Education editions.

If you're running either of the above editions, then this tutorial Is for you. So without further delay, let's get this started.

Step One:

To access the Group Policy Editor, open the Run menu, enter gpedit.msc and hit OK.


Step Two:

The Group Policy Editor will now launch, so navigate to the following directory.
Computer Configuration > Administrative Templates > System > Filesystem > NTFS

Make sure the NTFS folder Is selected, and on the right pane, double-click Do not allow encryption on all NTFS volumes.


Step Three:

To the left of the window, click the Enabled radio button and then hit OK to finalize the process. The NTFS file encryption has now been disabled. We'll check It out In the next few steps.


Step Four:

Let's make sure the change has taken effect. Firstly, I've right-clicked my folder named Windows 10 Tips, and then selected Properties.


Step Five:

Now I've simply hit the Advanced button as shown below.


Last Step:

As you can see and as expected, the Encrypt contents to secure data option Is grayed out, hence users cannot encrypt files and folders using the Encrypting File System (EFS) utility. Perfect!


Final Thoughts:

Whilst the Encrypting File System (EFS), serves It's purpose quite well to prevent unauthorized access to your files & folders via other user accounts, It can also work against you, If your password Is reset or the EFS file encryption certificate and key corrupts, disabling It altogether, prevents this In It's entirety. Moreover and as already mentioned, It prevents users who're sharing your computer from applying It.

If you've changed your mind and want to reverse the process, refer to Step Three above, select the Not Configured radio button and click OK.



Comments

Popular posts from this blog

How To Decode The Windows 10 Product Key

Every Windows 10 operating system that's Installed and activated on the computer, has what's called a Product Key, that Is either pre-Installed by the manufacturer, or added by the end user when formatting their PC. In order to have a fully-functional OS, It must contain a valid Product Key. Whilst there are many tools that can extract It from the operating system, In this tutorial, I will show you how to manually decode the Product Key.

How To Rename Any Power Plan In Windows 10

In terms of managing and controlling the way your computer utilizes power during It's computing operations, Windows has built-In power plans, that are basically a collection of hardware and system settings. By default, there are three In total, namely Balanced, Power Saver and High Performance. Whilst you can change the plan Itself, there's no option to do the same with It's name, hence In this tutorial, I will show you how to rename any power plan In Windows 10.

How To Create A Fake File Of Any File Size

Depending on your business environment or Individual requirements, sometimes there Is the need to test files of a given capacity. Such tests can Include Identifying how well your hard disks perform under heavy read/write operations, or to establish whether files can be securely deleted beyond recovery. Whatever the reason may be, In this tutorial, I will show you how to create a fake file of any file size.