Skip to content
Trending
Simplify Windows Devices to Run Only the Required Applications using Intune Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting Configure Windows Sandbox vGPU Policy using Intune for Better Graphics Performance or Reduced Attack Surface Simplify Windows Devices to Run Only the Required Applications using Intune Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting Configure Windows Sandbox vGPU Policy using Intune for Better Graphics Performance or Reduced Attack Surface
Windows 11 24H2 Personal Data Encryption Using the Unique Encryption Keys Per User Account

Windows 11 24H2 Personal Data Encryption Using the Unique Encryption Keys Per User Account

Written By Anoop C Nair
Last Updated October 9, 2024
Posted In Windows 11
SHARE

Hi, we are discussing Windows 11 24H2 Personal Data Encryption Using the Unique Encryption Keys Per User Account in Windows 11 24H2. As you all know, Windows 11 24 H2 recently received new features and updates. This update brings the best enhancements toward protecting the desktop by introducing personal data encryption for documents, folders, and, most importantly, photos.

As we all know, security is essential nowadays. In this case, it introduces the capability of Windows 11  Enterprise and Education editions as a personal data encryption method to protect our data. This protection feature protects essential data, such as Documents, pictures, and folders.

We know how important a document or file is to us, so this feature will significantly enhance the security protection of Windows 11 users. With this protection feature, we can expect many security improvements, and the most significant plus point of this security protection is that these folders will have a lock icon indicating they are encrypted.

This feature improves security by ensuring that personal data is protected and can only be accessed by the correct user. It is combined with the Intune policy. So, in this post, we can discuss what this new feature is for and how personal data encryption is to be worked in this feature.

Patch My PC

What are the Benefits of Personal Data Encryption?

Personal data Encryption, also known as PDE, is the best security feature in Windows 11. This feature provides file-based encryption for personal data such as documents, pictures, and even desktops.

Windows 11 24H2 Personal Data Encryption Using the Unique Encryption Keys Per User Account

Above, we discussed an overall view of this topic. Personal Data encryption is a new feature in Windows 11 enterprise and education editions. This feature protects the Desktop, Documents, and Pictures folders. These folders will have a lock icon indicating they are encrypted. Files in these folders are only readable during an active user session.

  • Windows Hello for Business will create a unique key for each user profile.
  • This means that even if someone else has access to the device.
  • They cannot read the contents of these files unless they are the logged-in user.
  • This is the best way to protect a document.
Windows 11 24H2 Personal Data Encryption Using the Unique Encryption Keys Per User Account -Fig. 1 Crds to Microsoft Mechanics
Windows 11 24H2 Personal Data Encryption Using the Unique Encryption Keys Per User Account-Fig. 1 Crds to Microsoft Mechanics

This encryption is separate from BitLocker or any other encryption method. It specifically protects user data on devices with multiple user accounts. If any user is a local administrator on the device, they can only see the folder and file names but cannot decrypt or view the contents.

NoPersonal Data Encryption Features
1It allows unique encryption Keys, so each user profile gets a unique encryption key. This allows a more stable security basis on per-user protection for their documents and folders.
2Anyone who opens your device can only see your files and folders in an encrypted format because a lock icon indicates it.
3PDE can be enabled on devices managed by Microsoft Intune through a policy.
4Once enabled, the Personal data is encrypted, and the encryption process runs in the background.
Windows 11 24H2 Personal Data Encryption Using the Unique Encryption Keys Per User Account-Table. 1
  • If the local administrator tries to open the folder and file names, they can’t because the folder is locked.
  • The security feature they provide is the best one for protecting personal data.

Note: This feature supports multiple user accounts on the same device.

Windows 11 24H2 Personal Data Encryption Using the Unique Encryption Keys Per User Account-Fig. 2 Crds to Microsoft Mechanics
Windows 11 24H2 Personal Data Encryption Using the Unique Encryption Keys Per User Account-Fig. 2 Crds to Microsoft Mechanics

Personal Data Encryption in Intune

This new feature enables Personal Data Encryption on devices managed by Microsoft Intune through a policy. Once the policy is enforced in Microsoft Intune, the encryption can be completed in 7 days. The processing of this encryption happens on a device’s defined maintenance window.

  • This will never impact on productivity.
  • Microsoft Intune> Device> Windows>Configuration>Create New Policy

More Details – Intune Bitlocker Drive Encryption A Deeper Dive To Explore (anoopcnair.com) and New BitLocker Disk Encryption Policy For Intune Endpoint Security

Windows 11 24H2 Personal Data Encryption Using the Unique Encryption Keys Per User Account-Fig. 3 Crds to Microsoft Mechanics
Windows 11 24H2 Personal Data Encryption Using the Unique Encryption Keys Per User Account-Fig. 3 Crds to Microsoft Mechanics

Join the LinkedIn Page and Telegram group to get the latest step-by-step guides and news updates. Join our Meetup Page to participate in User group meetings. Also, Join the WhatsApp Community to get the latest news on Microsoft Technologies. We are there on Reddit as well.

Author

Anoop C Nair has been Microsoft MVP from 2015 onwards for 10 consecutive years! He is a Workplace Solution Architect with more than 22+ years of experience in Workplace technologies. He is also a Blogger, Speaker, and Local User Group Community leader. His primary focus is on Device Management technologies like SCCM and Intune. He writes about technologies like Intune, SCCM, Windows, Cloud PC, Windows, Entra, Microsoft Security, Career, etc.

Written by

Anoop C Nair is Workplace Technology solution architect with 25+ years of experience in global enterprise organizations such as JP Morgan, Capgemini, etc. Microsoft Certified Trainer. Microsoft MVP from 2015 onwards for consecutive 11+ years! He also conducts Intune and modern workplace tech training for enterprise organizations. He is Blogger, Speaker, and Founder of HTMD Community and HTMD Conference. His main focus is on Device Management technologies like Intune, Windows, Cloud PC. He writes about technologies like Intune, SCCM, Windows, Cloud PC, Windows, Entra, Microsoft Security.

Discussion · 1 comment

  1. I like this feature a lot but the user needs to login using Windows Hello to be able to access their own documents

    Reply

Join the discussion

Your email address will not be published. Required fields are marked *

Related guides

Security

Microsoft Fixes 570 Security Vulnerabilities and 3 Zero-Day Vulnerabilities in July 2026 Patch Tuesday

Key Takeaways Microsoft Fixes 570 Security Vulnerabilities and 3 Zero-Day Vulnerabilities in July 2026 Patch Tuesday! Microsoft fixed 3 zero-day vulnerabilities as part of the July 2026 Patch Tuesday updates. Two of them, CVE-2026-56164 (Microsoft SharePoint Server Elevation of Privilege) and CVE-2026-56155 (Active Directory Federation Services Elevation of Privilege), were actively exploited before the security […]

AC Anoop C Nair 29 min read
Intune

Windows 11 KB5101650 KB5099414 July 2026 Patch and 3 Zero Day Vulnerabilities and 570 Flaws

Key Takeaways Windows 11 KB5101650 KB5099414 July 2026 Patch and 3 Zero Day Vulnerabilities and 570 Flaws! In the July 2026 Patch, Microsoft introduced new features designed to improve the overall Windows experience. The update adds enhancements to Windows Update for more flexible update management and introduces Point-in-Time Restore, providing an additional recovery option for […]

AC Anoop C Nair 9 min read
Windows 11

Boost Productivity with Zoom Workplace on Windows 11 | Setup Guide for Meetings Chat Calls and Collaboration

Key Takeaways Hey, let’s learn about Boost Productivity with Zoom Workplace on Windows 11 | Setup Guide for Meetings Chat Calls and Collaboration. Zoom workplace is an AI-powered collaboration app used for online meetings, team collaboration, and video calls. This application helps to conduct meetings Including chat and messaging, screen sharing and Calendar Integration. Boost […]

AC Anoop C Nair 35 min read
Windows 11

13 Windows AI Features to Turn Off for Better Privacy

Key takeaways Hey, let’s discuss about 13 Windows AI features to turn off for better privacy. AI is widely used in modern systems such as Windows 11 to automate tasks, improve productivity, and enhance user experience. However, AI also has several disadvantages. It may raise privacy concerns because personal data can be collected and analysed […]

AC Anoop C Nair 15 min read