Appendix A: Removable Media registry controls
EEFF defines the term removable media as a drive with the exception of boot drive and remote
drives. This may be a concern for client systems having built-in extra drives, for example an
extra hard drive with a ZIP drive. These drives will be subject to removable media encryption.
Relaxing the Removable Media definition
EEFF allows you to relax the removable media definition by applying it to USB drives and FireWire
drives, or, drives that report themselves as removable to the Operating System. Relaxing the
removable media definition is done by adding a registry value on the client computer.
Task
1
On the client system, create a DWORD registry value in
HKLM\System\CurrentControlSet\Services\MfeEEFF called
RelaxedRemovableMediaDefinition.
2
Set the registry value as required.
• "0": Default definition (same as not having this registry value)
• "1": Only disks reported as 'Removable' or located on the USB or IEEE 1394 (FireWire)
port
• "2": Only disks reported as 'Removable'
Restart the system to save the changes.
Exempt local drives and network shares from
encryption
You can exclude local drives and network drives from encryption by adding a registry value on
the client. Setting this registry value makes the EEFF driver not attach to local and network
drives, but only to removable media drives and CD/DVD drives.
Task
1
On the client system, create a DWORD value in HKLM\System\CCS\Service\MfeEEFF
called ExemptNonRemovable and set its value to 1.
Restart the system to save the changes.
McAfee Endpoint Encryption for Files and Folders version 4.0.0 Product Guide
40
