Loading...

Knowledge Center

Secondary local internal drives are unexpectedly encrypted after you enable the Removable Media policy
Technical Articles ID:   KB89027
Last Modified:  5/28/2019

Environment

McAfee File and Removable Media Protection (FRP) 5.x, 4.3.x

For details of FRP supported environments, see KB81149.

Problem

After you configure the FRP policies for Removable Media, clients with two internal drives have the secondary drive unexpectedly assigned to Windows Devices with Removable Storage, rather than Hard Disk Drives.

When this issue occurs, the following symptoms may also be present:
  • Users are unable to copy files to a local secondary internal drive. The secondary drive has become read-only after enabling the Removable Media policy.
  • Secondary hard drives are treated as USB drives and all the files are encrypted.
Secondary internal hard drives are not removable media and should not be shown in the Endpoint Encryption for Removable Media interface. There are no FRP policy options available to disable this feature.

Solution

The Relaxed Removable Media Definition feature enhancement prevents local drives from being displayed as removable media. Also, enhancements have been made to always ensure the system boot drive is never treated as removable media.

To relax the removable media definition, add the following registry entry on the client system: 

CAUTION: This article contains information about opening or modifying the registry.
  • The following information is intended for System Administrators. Registry modifications are irreversible and could cause system failure if done incorrectly.
  • Before proceeding, Technical Support strongly recommends that you back up your registry and understand the restore process. For more information, see: http://support.microsoft.com/kb/256986.
  • Do not run a REG file that is not confirmed to be a genuine registry import file.
  1. Click Start, Run, type regedit, and click OK.
  2. Navigate to the following location:

    HKLM\System\CurrentControlSet\Services\MfeEEFF
     
  3. Right-click on RelaxedRemovableMediaDefinition and select Modify.
  4. Set the value data according to the following table:
    NOTE: The default value is set to 1.
    0
    Default definition (same as not having this registry value)
    1
    Only disks reported as removable or located on the USB or IEEE 1394 port
    2
    Only disks reported as Removable to the operating system
     
  5.  Restart the system.

Rate this document

Glossary of Technical Terms


 Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.