Allow or Disallow use of encryption to protect the RPC protocol messages between File Share Shadow Copy Provider running on application server and File Share Shadow Copy Agent running on the file servers.: registry value EncryptProtocolComputerHKLM\Software\Policies\Microsoft\Windows\fssProv

Policy ID: Pol_EncryptProtocol
Scope: Computer Configuration
Supported on: At least Windows Server 2012, Windows 8 or Windows RT
Source: Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
Category: System › File Share Shadow Copy Provider

Registry

EncryptProtocol

REG_DWORDComputer

HKLM\Software\Policies\Microsoft\Windows\fssProv Current key

Enabled value: 1
Disabled value: 0

Apply with .reg · CMD · PowerShell

.reg

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\fssProv]

; Options (use only one)
; Enabled
"EncryptProtocol"=dword:00000001
; Disabled
"EncryptProtocol"=dword:00000000

CMD

:: Options (use only one)

:: Enabled
reg add "HKLM\Software\Policies\Microsoft\Windows\fssProv" /v "EncryptProtocol" /t REG_DWORD /d 1 /f
:: Disabled
reg add "HKLM\Software\Policies\Microsoft\Windows\fssProv" /v "EncryptProtocol" /t REG_DWORD /d 0 /f

PowerShell

# Common: create the key
New-Item -Path 'HKLM:\Software\Policies\Microsoft\Windows\fssProv' -Force | Out-Null

# Options (use only one)
# Enabled
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Windows\fssProv' -Name 'EncryptProtocol' -PropertyType DWord -Value 1 -Force | Out-Null
# Disabled
New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Windows\fssProv' -Name 'EncryptProtocol' -PropertyType DWord -Value 0 -Force | Out-Null