Published by


Brink's Avatar
Administrator

Posts: 25,217

Show Printable Version 


How to Enable or Disable Virtual Memory Pagefile Encryption in Windows 10

information   Information
Encrypting the pagefile prevents malicious users from reading data that has been paged to disk, but also adds processing overhead for filesystem operations.

This tutorial will show you how to enable or disable virtual memory pagefile encryption in Windows 10.

You must be signed in as an administrator to be able to enable or disable NTFS pagefile encryption.

CONTENTS:
  • Option One: To Enable or Disable Virtual Memory Pagefile Encryption in Local Group Policy
  • Option Two: To Enable or Disable Virtual Memory Pagefile Encryption using a REG file
  • Option Three: To Enable or Disable Virtual Memory Pagefile Encryption in Command Prompt





Enable or Disable Virtual Memory Pagefile Encryption in Windows 10 OPTION ONE Enable or Disable Virtual Memory Pagefile Encryption in Windows 10
To Enable or Disable Virtual Memory Pagefile Encryption in Local Group Policy

Note   Note
Local Group Policy Editor is only available in the Windows 10 Pro, Enterprise, and Education editions.

All editions can use Option TWO or Option THREE below though.

1. Open the Local Group Policy Editor.

2. In the left pane of Local Group Policy Editor, navigate to the location below. (see screenshot below)

Computer Configuration\Administrative Templates\System\Filesystem\NTFS

Name:  Pagefile_encryption_gpedit-1.jpg
Views: 1097
Size:  94.9 KB

3. In the right pane of the NTFS key in Local Group Policy Editor, double click/tap on the Enable NTFS pagefile encryption policy to edit it. (see screenshot above)

4. Do step 5 (disable) or step 6 (disable) below for what you would like to do.


 5. To Disable Virtual Memory Pagefile Encryption

A) Select (dot) Not Configured or Disabled, click/tap on OK, and go to step 7 below. (see screenshot below)

NOTE: Not Configured is the default setting.


 6. To Enable Virtual Memory Pagefile Encryption

A) Select (dot) Enabled, click/tap on OK, and go to step 7 below. (see screenshot below)

Name:  Pagefile_encryption_gpedit-2.jpg
Views: 1022
Size:  62.3 KB

7. When finished, you can close the Local Group Policy Editor if you like.

8. Restart the computer to apply.





Enable or Disable Virtual Memory Pagefile Encryption in Windows 10 OPTION TWO Enable or Disable Virtual Memory Pagefile Encryption in Windows 10
To Enable or Disable Virtual Memory Pagefile Encryption using a REG file

Note   Note
The .reg files below will modify the DWORD values in the registry keys below.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem

NtfsEncryptPagingFile DWORD

0 = Disable
1 = Enable

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Policies

(delete) NtfsEncryptPagingFile DWORD

1. Do step 2 (enable) or step 3 (disable) below for what you would like to do.


 2. To Enable Virtual Memory Pagefile Encryption

A) Click/tap on the Download button below to download the file below, and go to step 4 below.

Enable_Pagefile_Encryption.reg

download


 3. To Disable Virtual Memory Pagefile Encryption

NOTE: This is the default setting.

A) Click/tap on the Download button below to download the file below, and go to step 4 below.

Disable_Pagefile_Encryption.reg

download

4. Save the .reg file to your desktop.

5. Double click/tap on the downloaded .reg file to merge it.

6. If prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.

7. Restart the computer to apply.

8. If you like, you can now delete the downloaded .reg file.





Enable or Disable Virtual Memory Pagefile Encryption in Windows 10 OPTION THREE Enable or Disable Virtual Memory Pagefile Encryption in Windows 10
To Enable or Disable Virtual Memory Pagefile Encryption in Command Prompt

1. Open an elevated command prompt.

2. Do step 3 (status), step 4 (enable), or step 5 (disable) below for what you would like to do.


 3. To See if Virtual Memory Pagefile Encryption is Currently Enabled or Disabled

A) Enter the command below into the elevated command prompt, press Enter, and go to step 4 (enable) or step 5 (disable) below. (see screenshot below)

fsutil behavior query encryptpagingfile

Note   Note
0 = disabled

1 = enabled

Name:  Determine_pagefile_encryption_command.jpg
Views: 997
Size:  42.8 KB


 4. To Enable Virtual Memory Pagefile Encryption

A) Enter the command below into the elevated command prompt, press Enter, and go to step 6 below. (see screenshot below)

fsutil behavior set encryptpagingfile 1

Click image for larger version. 

Name:	Enable_pagefile_encryption_command.jpg 
Views:	52 
Size:	53.0 KB 
ID:	122265


 5. To Disable Virtual Memory Pagefile Encryption

A) Enter the command below into the elevated command prompt, press Enter, and go to step 6 below. (see screenshot below)

fsutil behavior set encryptpagingfile 0

Click image for larger version. 

Name:	Disable_pagefile_encryption_command.jpg 
Views:	57 
Size:	51.4 KB 
ID:	122264

7. When finished, you can close the elevated command prompt if you like.

8. Restart the computer to apply.



That's it,
Shawn