.      How to articles       Windows Services       Group Policy             Donate        
Computer step by step

How to Start/Stop Encrypting File System (EFS) service

Service name: EFS

Display name: Encrypting File System (EFS)


Description:

Provides the core file encryption technology used to store encrypted files on NTFS file system volumes. If this service is stopped or
disabled, applications will be unable to access encrypted files.


Path to executable:

C:\WINDOWS\System32\lsass.exe

CMD:
This method shows you how to Start/Stop Encrypting File System (EFS) service from Command Prompt

Perform the following steps:

Please go to Start and click on the Type here to search

Type cmd, right click on cmd icon under the Programs and click on Run as administrator

Services Regedit CMD Msconfig

Please confirm User Account Control pop-up

Please select, right and copy a registry key from below, then right click on command prompt window, select Paste and press Enter


To Start Encrypting File System (EFS) service:

net start EFS

sc start EFS


Note: You can’t start a service if Startup type is on Disabled.


To Stop Encrypting File System (EFS) service:

net stop EFS

sc stop EFS


To change Startup type:

Automatic:

REG add "HKLM\SYSTEM\CurrentControlSet\PerfHost\EFS" /v Start /t REG_DWORD /d 2 /f

sc config EFS start= auto

Manual:

REG add "HKLM\SYSTEM\CurrentControlSet\services\EFS" /v Start /t REG_DWORD /d 3 /f

sc config EFS start= demand

Disabled:

REG add "HKLM\SYSTEM\CurrentControlSet\services\EFS" /v Start /t REG_DWORD /d 4 /f

sc config EFS start= disabled

Automatic (Delayed Start):

REG add "HKLM\SYSTEM\CurrentControlSet\services\EFS" /v Start /t REG_DWORD /d 2 /f

sc config EFS start= delayed-auto


Note: When you change to Automatic (Delayed Start) a new key DelayedAutostart is created with value 1.

REG add "HKLM\SYSTEM\CurrentControlSet\services\EFS" /v DelayedAutostart /t REG_DWORD /d 1 /f


When you change to Automatic from Automatic (Delayed Start), DelayedAutostart change value to 0.

REG add "HKLM\SYSTEM\CurrentControlSet\services\EFS" /v DelayedAutostart /t REG_DWORD /d 0 /f