The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Press CTRL+K to open search

Exempt local drives and network shares from encryption

  • Published on Sep 13, 2026
  • 1 minute(s) read
Prev Next

You can exclude local drives and network drives from encryption by adding a registry value on the client. Setting this registry value makes the Trellix FRP driver not attach to local and network drives, but only to removable media drives and CD/DVD drives.

  1. On the client system, create a DWORD value in HKLM\System\CCS\Service\MfeEEFF called ExemptNonRemovable and set its value to 1.

  2. Restart the system to save the changes.

It fails to encrypt the file on the local drive, but encrypts the same file on a removable drive.

Note

This registry value must be manually set on each client system. It can also be remotely distributed with a systems management tool. When enabled, it is not possible to read (decrypt) any existing encrypted files on local drives or network shares.

Copyright © 2026 Musarubra US LLC | Privacy | Legal | AI Disclaimer