Windows 7 - Page File Encryption - Enable or Disable

Brink

How to Enable or Disable Page File Encryption in Vista and Windows 7

Information

This will show you how to enable or disable encrypting the virtual memory page file in Vista and Windows 7.

Encrypting the page file prevents malicious users from reading data that has been paged to a NTFS disk, but will also add processing overhead for file system operations.

You must be logged in as an administrator to be able to do this tutorial.

OPTION ONE

Using a REG File Download

1. To Enable Page File Encryption
A) Click on the Download button below to download the file below.
Enable_Page_File_Encryption.reg

B) Go to step 3.

2. To Disable Page File Encryption
NOTE: This is the default setting.
A) Click on the Download button below to download the file below.
Disable_Page_File_Encryption.reg

3. Click on Save, and save the .reg file to the desktop.

4. Right click on the downloaded .reg file and click on Merge.

5. Click on Run, Continue (UAC-Vista) or Yes (UAC-Windows 7), Yes, and OK when prompted.

6. Restart the computer to apply.

7. When done, you can delete the downloaded .reg file if you like.

OPTION TWO

Through the Local Group Policy Editor

NOTE: This option is only available in Windows 7, and is not in Vista.

1. Open the Local Group Policy Editor.

2. In the left pane, click on to expand Computer Configuration, Administrative Templates, System, Filesytem, and NTFS. (see screenshot below)

3. In the right pane, right click on Enable NTFS pagefile encryption and click on Edit. (see screenshot above)

4. To Disable Page File Encryption
NOTE: This is the default setting.
A) Select (dot) either Not Configured or Disabled. (see screenshot below step 6)

B) Go to step 6.

5. To Enable Page File Encryption
A) Select (dot) Enabled. (see screenshot below step 6)

6. Click on OK. (see screenshot below)

7. Close the Local Group Policy Editor window.

8. Restart the computer to apply.

OPTION THREE

Using a Elevated Command Prompt

1. Open a elevated command prompt (Run as administrator).

2. To Enable Page File Encryption
A) In the elevated command prompt, copy and paste the command below and press Enter.
fsutil behavior set encryptpagingfile 1

B) Go to step 4.

3. To Disable Page File Encryption
NOTE: This is the default setting.
A) In the elevated command prompt, copy and paste the command below and press Enter.
fsutil behavior set encryptpagingfile 0

4. Close regedit, and restart the computer to apply.

5. To Verify the Page File Encryption Setting
A) Open a elevated command prompt.

B) In the elevated command prompt, copy and paste the command below and press Enter.
NOTE: 0 = disabled and 1 = enabled
fsutil behavior query encryptpagingfile

That's it,
Shawn

Related Tutorials

StalkeR · 02-10-2011

Very nice.. as usual Shawn!

Brink · 02-10-2011

Thank you Boshko.

EzioAuditore · 02-10-2011

Thank you Shawn, just did it.

By the way, I think a mistake's there in language. The part in blue seems to have inter-changed.

Quote:

4. To Enable Page File Encryption

A) Select (dot) either Not Configured or Disabled. (see screenshot below step 6)

B) Go to step 6.

5. To Disable Page File Encryption
NOTE: This is the default setting.A) Select (dot) Enabled. (see screenshot below step 6)

Fayla · 02-10-2011

Interesting option! I tried enabling it via the registry file but it told me that "the key did not exist"? So I just configured it via the GP Editor.

Brink · 02-10-2011

Quote: Originally Posted by EzioAuditore

Thank you Shawn, just did it.

By the way, I think a mistake's there in language. The part in blue seems to have inter-changed.

Quote:

4. To Enable Page File Encryption

A) Select (dot) either Not Configured or Disabled. (see screenshot below step 6)

B) Go to step 6.

5. To Disable Page File Encryption
NOTE: This is the default setting.A) Select (dot) Enabled. (see screenshot below step 6)

Thank you Ezio. It has been corrected.

Brink · 02-10-2011

Quote: Originally Posted by Lost Colonist

Interesting option! I tried enabling it via the registry file but it told me that "the key did not exist"? So I just configured it via the GP Editor.

Hello Lost Colonist,

Was it a "file association does not exist..." type error instead?

When you right click on the REG file, did you have a Merge option in the context menu?

Were you logged in an adminsitrator account when using the REG file?

Windows 911 · 03-07-2011

Hello guys, I am wondering if I should encrypt the virtual page file... or just have it deleted on shutdown. What do you recommend? Or should I even bother with it? I just have a simple laptop..

Brink · 03-07-2011

Hello Windows 911,

Usually you would only encrpyt or delete the page file on exit if you are concerned about the possibily of someone reading it's contents. Encrypting the page file will get a small negative performance hit in Windows since it will take a bit longer to encrypt and decrypt everything in and out of the page file. Deleting the page file on exit will cause a delay at shutdown while you wait on the page file to be deleted.

I would not recommend to turn off the page file. Some programs, usually older ones though, will require the page file to be turned on for them to run properly no matter how much RAM you have installed.

Hope this helps some,
Shawn

Windows 911 · 03-07-2011

Thank you for the quick reply

Im thinking about encrypting at least, especially that I carry my computer around frequently. Is the performance impact negligible, or obvious? I don't care if it adds a couple seconds to startup or shutdown. Do you use it on your system Brink?

Windows 7 - Page File Encryption - Enable or Disable

Page File Encryption - Enable or Disable

Page File Encryption - Enable or Disable problems?