windows-itpro-docs/windows/client-management/mdm/policy-csp-admx-filesys.md

title, description, ms.date

title	description	ms.date
ADMX_FileSys Policy CSP	Learn more about the ADMX_FileSys Area in Policy CSP.	09/27/2024

Policy CSP - ADMX_FileSys

[!INCLUDE ADMX-backed CSP tip]

DisableCompression

Scope	Editions	Applicable OS
✅ Device ❌ User	✅ Pro ✅ Enterprise ✅ Education ✅ Windows SE ✅ IoT Enterprise / IoT Enterprise LTSC	✅ Windows 10, version 2004 with KB5005101 [10.0.19041.1202] and later ✅ Windows 10, version 20H2 with KB5005101 [10.0.19042.1202] and later ✅ Windows 10, version 21H1 with KB5005101 [10.0.19043.1202] and later ✅ Windows 11, version 21H2 [10.0.22000] and later

./Device/Vendor/MSFT/Policy/Config/ADMX_FileSys/DisableCompression

Compression can add to the processing overhead of filesystem operations. Enabling this setting will prevent access to and creation of compressed files.

A reboot is required for this setting to take effect.

Description framework properties:

Property name	Property value
Format	chr (string)
Access Type	Add, Delete, Get, Replace

[!INCLUDE ADMX-backed policy note]

ADMX mapping:

Name	Value
Name	DisableCompression
Friendly Name	Do not allow compression on all NTFS volumes
Location	Computer Configuration
Path	System > Filesystem > NTFS
Registry Key Name	System\CurrentControlSet\Policies
Registry Value Name	NtfsDisableCompression
ADMX File Name	FileSys.admx

DisableDeleteNotification

Scope	Editions	Applicable OS
✅ Device ❌ User	✅ Pro ✅ Enterprise ✅ Education ✅ Windows SE ✅ IoT Enterprise / IoT Enterprise LTSC	✅ Windows 10, version 2004 with KB5005101 [10.0.19041.1202] and later ✅ Windows 10, version 20H2 with KB5005101 [10.0.19042.1202] and later ✅ Windows 10, version 21H1 with KB5005101 [10.0.19043.1202] and later ✅ Windows 11, version 21H2 [10.0.22000] and later

./Device/Vendor/MSFT/Policy/Config/ADMX_FileSys/DisableDeleteNotification

Delete notification is a feature that notifies the underlying storage device of clusters that are freed due to a file delete operation.

A value of 0, the default, will enable delete notifications for all volumes.

A value of 1 will disable delete notifications for all volumes.

Description framework properties:

Property name	Property value
Format	chr (string)
Access Type	Add, Delete, Get, Replace

[!INCLUDE ADMX-backed policy note]

ADMX mapping:

Name	Value
Name	DisableDeleteNotification
Friendly Name	Disable delete notifications on all volumes
Location	Computer Configuration
Path	System > Filesystem
Registry Key Name	System\CurrentControlSet\Policies
Registry Value Name	DisableDeleteNotification
ADMX File Name	FileSys.admx

DisableEncryption

Scope	Editions	Applicable OS
✅ Device ❌ User	✅ Pro ✅ Enterprise ✅ Education ✅ Windows SE ✅ IoT Enterprise / IoT Enterprise LTSC	✅ Windows 10, version 2004 with KB5005101 [10.0.19041.1202] and later ✅ Windows 10, version 20H2 with KB5005101 [10.0.19042.1202] and later ✅ Windows 10, version 21H1 with KB5005101 [10.0.19043.1202] and later ✅ Windows 11, version 21H2 [10.0.22000] and later

./Device/Vendor/MSFT/Policy/Config/ADMX_FileSys/DisableEncryption

Encryption can add to the processing overhead of filesystem operations. Enabling this setting will prevent access to and creation of encrypted files.

A reboot is required for this setting to take effect.

Description framework properties:

Property name	Property value
Format	chr (string)
Access Type	Add, Delete, Get, Replace

[!INCLUDE ADMX-backed policy note]

ADMX mapping:

Name	Value
Name	DisableEncryption
Friendly Name	Do not allow encryption on all NTFS volumes
Location	Computer Configuration
Path	System > Filesystem > NTFS
Registry Key Name	System\CurrentControlSet\Policies
Registry Value Name	NtfsDisableEncryption
ADMX File Name	FileSys.admx

EnablePagefileEncryption

Scope	Editions	Applicable OS
✅ Device ❌ User	✅ Pro ✅ Enterprise ✅ Education ✅ Windows SE ✅ IoT Enterprise / IoT Enterprise LTSC	✅ Windows 10, version 2004 with KB5005101 [10.0.19041.1202] and later ✅ Windows 10, version 20H2 with KB5005101 [10.0.19042.1202] and later ✅ Windows 10, version 21H1 with KB5005101 [10.0.19043.1202] and later ✅ Windows 11, version 21H2 [10.0.22000] and later

./Device/Vendor/MSFT/Policy/Config/ADMX_FileSys/EnablePagefileEncryption

Encrypting the page file prevents malicious users from reading data that has been paged to disk, but also adds processing overhead for filesystem operations. Enabling this setting will cause the page files to be encrypted.

Description framework properties:

Property name	Property value
Format	chr (string)
Access Type	Add, Delete, Get, Replace

[!INCLUDE ADMX-backed policy note]

ADMX mapping:

Name	Value
Name	EnablePagefileEncryption
Friendly Name	Enable NTFS pagefile encryption
Location	Computer Configuration
Path	System > Filesystem > NTFS
Registry Key Name	System\CurrentControlSet\Policies
Registry Value Name	NtfsEncryptPagingFile
ADMX File Name	FileSys.admx

LongPathsEnabled

Scope	Editions	Applicable OS
✅ Device ❌ User	✅ Pro ✅ Enterprise ✅ Education ✅ Windows SE ✅ IoT Enterprise / IoT Enterprise LTSC	✅ Windows 10, version 2004 with KB5005101 [10.0.19041.1202] and later ✅ Windows 10, version 20H2 with KB5005101 [10.0.19042.1202] and later ✅ Windows 10, version 21H1 with KB5005101 [10.0.19043.1202] and later ✅ Windows 11, version 21H2 [10.0.22000] and later

./Device/Vendor/MSFT/Policy/Config/ADMX_FileSys/LongPathsEnabled

Enabling Win32 long paths will allow manifested win32 applications and packaged Microsoft Store applications to access paths beyond the normal 260 character limit. Enabling this setting will cause the long paths to be accessible within the process.

Description framework properties:

Property name	Property value
Format	chr (string)
Access Type	Add, Delete, Get, Replace

[!INCLUDE ADMX-backed policy note]

ADMX mapping:

Name	Value
Name	LongPathsEnabled
Friendly Name	Enable Win32 long paths
Location	Computer Configuration
Path	System > Filesystem
Registry Key Name	System\CurrentControlSet\Control\FileSystem
Registry Value Name	LongPathsEnabled
ADMX File Name	FileSys.admx

ShortNameCreationSettings

Scope	Editions	Applicable OS
✅ Device ❌ User	✅ Pro ✅ Enterprise ✅ Education ✅ Windows SE ✅ IoT Enterprise / IoT Enterprise LTSC	✅ Windows 10, version 2004 with KB5005101 [10.0.19041.1202] and later ✅ Windows 10, version 20H2 with KB5005101 [10.0.19042.1202] and later ✅ Windows 10, version 21H1 with KB5005101 [10.0.19043.1202] and later ✅ Windows 11, version 21H2 [10.0.22000] and later

./Device/Vendor/MSFT/Policy/Config/ADMX_FileSys/ShortNameCreationSettings

These settings provide control over whether or not short names are generated during file creation. Some applications require short names for compatibility, but short names have a negative performance impact on the system.

If you enable short names on all volumes then short names will always be generated. If you disable them on all volumes then they will never be generated. If you set short name creation to be configurable on a per volume basis then an on-disk flag will determine whether or not short names are created on a given volume. If you disable short name creation on all data volumes then short names will only be generated for files created on the system volume.

Description framework properties:

Property name	Property value
Format	chr (string)
Access Type	Add, Delete, Get, Replace

[!INCLUDE ADMX-backed policy note]

ADMX mapping:

Name	Value
Name	ShortNameCreationSettings
Friendly Name	Short name creation options
Location	Computer Configuration
Path	System > Filesystem > NTFS
Registry Key Name	System\CurrentControlSet\Policies
ADMX File Name	FileSys.admx

SymlinkEvaluation

Scope	Editions	Applicable OS
✅ Device ❌ User	✅ Pro ✅ Enterprise ✅ Education ✅ Windows SE ✅ IoT Enterprise / IoT Enterprise LTSC	✅ Windows 10, version 2004 with KB5005101 [10.0.19041.1202] and later ✅ Windows 10, version 20H2 with KB5005101 [10.0.19042.1202] and later ✅ Windows 10, version 21H1 with KB5005101 [10.0.19043.1202] and later ✅ Windows 11, version 21H2 [10.0.22000] and later

./Device/Vendor/MSFT/Policy/Config/ADMX_FileSys/SymlinkEvaluation

Symbolic links can introduce vulnerabilities in certain applications. To mitigate this issue, you can selectively enable or disable the evaluation of these types of symbolic links:

Local Link to a Local Target.

Local Link to a Remote Target.

Remote Link to Remote Target.

Remote Link to Local Target.

For further information please refer to the Windows Help section.

Note

If this policy is Disabled or Not Configured, local administrators may select the types of symbolic links to be evaluated.

Description framework properties:

Property name	Property value
Format	chr (string)
Access Type	Add, Delete, Get, Replace

[!INCLUDE ADMX-backed policy note]

ADMX mapping:

Name	Value
Name	SymlinkEvaluation
Friendly Name	Selectively allow the evaluation of a symbolic link
Location	Computer Configuration
Path	System > Filesystem
Registry Key Name	Software\Policies\Microsoft\Windows\Filesystems\NTFS
Registry Value Name	SymLinkState
ADMX File Name	FileSys.admx

TxfDeprecatedFunctionality

Scope	Editions	Applicable OS
✅ Device ❌ User	✅ Pro ✅ Enterprise ✅ Education ✅ Windows SE ✅ IoT Enterprise / IoT Enterprise LTSC	✅ Windows 10, version 2004 with KB5005101 [10.0.19041.1202] and later ✅ Windows 10, version 20H2 with KB5005101 [10.0.19042.1202] and later ✅ Windows 10, version 21H1 with KB5005101 [10.0.19043.1202] and later ✅ Windows 11, version 21H2 [10.0.22000] and later

./Device/Vendor/MSFT/Policy/Config/ADMX_FileSys/TxfDeprecatedFunctionality

TXF deprecated features included savepoints, secondary RM, miniversion and roll forward. Please enable it if you want to use these APIs.

Description framework properties:

Property name	Property value
Format	chr (string)
Access Type	Add, Delete, Get, Replace

[!INCLUDE ADMX-backed policy note]

ADMX mapping:

Name	Value
Name	TxfDeprecatedFunctionality
Friendly Name	Enable / disable TXF deprecated features
Location	Computer Configuration
Path	System > Filesystem > NTFS
Registry Key Name	System\CurrentControlSet\Policies
Registry Value Name	NtfsEnableTxfDeprecatedFunctionality
ADMX File Name	FileSys.admx

Related articles

Policy configuration service provider