ADMX Viewer
Microsoft.Policies.BitLockerManagement• Machine

Encryption Policy Enforcement Settings

This setting allows you to configure the number of days that users can delay complying with MBAM policies for their operating system drive. After this grace period expires, users will not be able to postpone the required action or request an exemption from it. The grace period begins when the operating system is first detected as noncompliant. This grace period is the same for all users of the same computer, regardless of when each user logs on. Specifying a grace period of 0 will force the encryption process to begin immediately on the operating system drive. If the grace period expires and the operating system drive is still not compliant, users will not be presented with the option to postpone the required action or request an exemption. If the encryption process requires user input, a dialog box will appear that users cannot close until they provide the required information. Further notifications, such as error messages or encryption status, will not have the same restriction. Specifying a grace period of 0 will enforce the policy immediately on the operating system drive.

Policy Details

Policy Name
UseOsEnforcePolicy_Name
Registry Key
Software\Policies\Microsoft\FVE\MDOPBitLockerManagement
Value Name
UseOsEnforcePolicy
Supported On
At least Windows 7
Policy State Values
Enabled: 1
Disabled: 0
Available Languages
en-us

Configuration Elements

Configure the number of noncompliance grace period days for operating system drives:

Type: decimal

Default: 0

Min: 0
Max: 730