Fix ERROR_EFS_DISABLED (0X0000177F) on Windows 10/11

I know it's frustrating when you try to encrypt a file and Windows just stops you cold with that error code. Let me walk you through the fix step by step. I'll show you two ways to do it — one using the Registry Editor and one using Group Policy (for Windows Pro users).

First Thing: Check If You're On a Work or Home PC

Before we start, figure out your Windows edition. Press Windows Key + R, type winver, and hit Enter. If it says "Windows 10 Pro" or "Windows 11 Pro," you can use the Group Policy method. If it says Home, stick to the Registry method.

The Fix: Enable EFS via Registry Editor

This is the fix that works on every version of Windows 10 and 11 — Home, Pro, you name it.

Step 1: Open Registry Editor

1. Press Windows Key + R to open the Run dialog.
2. Type regedit and press Enter.
3. When the User Account Control (UAC) prompt appears, click Yes.

Step 2: Navigate to the EFS Policy Key

1. In Registry Editor, look at the left panel. You'll see folders like HKEY_LOCAL_MACHINE.
2. Copy and paste this path into the address bar at the top (or click through the folders):

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\CurrentVersion\EFS

What to expect: If you see a key called EFS, click on it. If you don't see it, right-click on the CurrentVersion folder, select New > Key, and name it EFS.

Step 3: Create the Policy Value

1. Click on the EFS folder so it's highlighted.
2. Right-click in the empty space on the right panel.
3. Select New > DWORD (32-bit) Value.
4. Name it EnableEFS.
5. Double-click on EnableEFS you just created.
6. In the "Value data" box, type 1.
7. Make sure the "Base" option is set to Hexadecimal (it should be by default).
8. Click OK.

Step 4: Restart Your Computer

Close Registry Editor. Restart your PC. After it boots back up, try encrypting a file again. Right-click a file, go to Properties > Advanced, and you should see the option to "Encrypt contents to secure data" available now.

Alternative Method: Group Policy (Windows Pro Only)

If you're on Windows Pro or Enterprise, you can also use Group Policy. Both methods do the same thing, but Group Policy is sometimes easier to find.

1. Press Windows Key + R, type gpedit.msc, and press Enter.
2. Go to Computer Configuration > Administrative Templates > Windows Components > BitLocker Drive Encryption > Operating System Drives.
3. Wait — that's not right. Actually, EFS settings are under Computer Configuration > Windows Settings > Security Settings > Public Key Policies > Encrypting File System.
4. Right-click Encrypting File System on the left and select Properties.
5. Set it to Enabled. Click OK.
6. Restart your computer.

Why Did This Fix Work?

The error 0X0000177F happens because EFS (Encrypting File System) is turned off at the policy level. This can happen after a Windows update, if someone (or some software) changed a policy, or if you migrated from an older Windows version. The registry value EnableEFS set to 1 tells Windows to let you use encryption. Simple as that.

Less Common Variations of This Issue

EFS Service Not Running

Sometimes the EFS service itself is stopped or disabled. To check this:

1. Press Windows Key + R, type services.msc, and press Enter.
2. Scroll down to Encrypting File System (EFS).
3. Double-click it. If the "Startup type" is set to Disabled, change it to Automatic.
4. Click Start to run it right now.
5. Click OK and restart the PC.

Corrupted User Profile

In rare cases, the user profile is the problem. If the registry and service are both fine but you still get the error, try creating a new local user account and see if encryption works there. If it does, back up your files and migrate to the new profile.

Prevention Tips

• Don't disable EFS with third-party tools. Some "performance tweakers" disable EFS to save resources. It's not worth it.
• Check Group Policy after major updates. Windows updates sometimes reset policies. The fix above takes 5 minutes to reapply.
• Back up your EFS certificate. If you encrypt files and lose the certificate, you lose the files. Export it from certmgr.msc under Personal > Certificates. Store it on a USB drive.

That's it. You should be able to encrypt files now. If the error still shows up, double-check the registry value — sometimes it gets overwritten by antivirus or security software. Disable any third-party encryption software temporarily to test.