Allow offline scan from trusted Windows Recovery Environment
- Policy ID
- AllowTrustedOfflineScan
- Scope
- Computer Configuration
- Supported on
- At least Windows Server 2016, Windows 10
- Source
- Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
- Category
- System › Recovery
Description
Requirements: Windows 10
Description: This policy setting controls whether offline scan should be allowed from a trusted Windows Recovery Environment.
If you enable this policy setting, offline scan will execute without prompting for BitLocker recovery key, as long as the Windows Recovery Environment is trusted by BitLocker.
If you disable or do not configure this policy setting, offline scan will prompt the user for BitLocker recovery key to unlock the OS volume. If user skips unlock the OS volume, offline scan will not execute. This is the default setting.
Registry
ComputerHKEY_LOCAL_MACHINE
- AllowTrustedOfflineScanREG_DWORD