Encryption Policy Enforcement Settings
This setting allows you to configure the number of days that users can delay complying with MBAM policies for their operating system drive. After this grace period expires, users will not be able to postpone the required action or request an exemption from it. The grace period begins when the operating system is first detected as noncompliant. This grace period is the same for all users of the same computer, regardless of when each user logs on. Specifying a grace period of 0 will force the encryption process to begin immediately on the operating system drive. If the grace period expires and the operating system drive is still not compliant, users will not be presented with the option to postpone the required action or request an exemption. If the encryption process requires user input, a dialog box will appear that users cannot close until they provide the required information. Further notifications, such as error messages or encryption status, will not have the same restriction. Specifying a grace period of 0 will enforce the policy immediately on the operating system drive.
Policy Details
- Policy Name
- UseOsEnforcePolicy_Name
- Registry Key
- Software\Policies\Microsoft\FVE\MDOPBitLockerManagement
- Value Name
- UseOsEnforcePolicy
- Supported On
- At least Windows 7
- Policy State Values
- Enabled: 1Disabled: 0
- Available Languages
- en-us
Configuration Elements
Configure the number of noncompliance grace period days for operating system drives:
Type: decimal
Default: 0