Configure global encryption settings

If you use role-based administration, you must have the right Global encryption settings.

For more information, see About roles and sub-estates.

Besides the settings in full disk encryption policies you can configure global encryption settings: display settings, global settings for Local Self Help and logging settings.

To configure global encryption settings:

In the Policies pane, double-click Full disk encryption. Then double-click the policy you want to change.
The Full Disk Encryption dialog box is displayed.
Click Global Encryption Settings.
The Global Encryption Settings dialog box is displayed.
Under Display, configure the following settings:
1. To show the full disk encryption icon in the Windows notification area on endpoint computers for quick and easy access to all user functions, select Icon in Windows notification area.
2. To show the encryption icon in Windows Explorer on endpoint computers for encrypted drives, select Encryption status in Windows Explorer.
3. To display your chosen text before the user logs on at the Power-on Authentication, select Legal notice when the computer starts. To configure the text to be displayed (for example legal notices required by law or information for anyone who finds a lost laptop) click Configure, enter the required text in the Configure Legal Notice dialog box and click OK.
Under Local Self Help, you can define global settings for the Local Self Help logon recovery method. For more information, see Configure Local Self Help.
Click OK.