Policy

Prevent memory overwrite on restart

This policy setting controls computer restart performance at the risk of exposing BitLocker secrets. This policy setting is applied when you turn on BitLocker. BitLocker secrets include key material used to encrypt data. This policy setting applies only when BitLocker protection is enabled. If you enable this policy setting, memory will not be overwritten when the computer restarts. Preventing memory overwrite may improve restart performance but will increase the risk of exposing BitLocker secrets. If you disable or do not configure this policy setting, BitLocker secrets are removed from memory when the computer restarts.

Policy
Pack Microsoft Windows
Category Windows Components / BitLocker Drive Encryption
Policy ID 76aa89c630d0
Internal name MorBehavior_Name

Registry

Copy registry mappings

HKLM\Software\Policies\Microsoft\FVE\MorBehavior (enabled) = 1
HKLM\Software\Policies\Microsoft\FVE\MorBehavior (disabled) = 0

Policy notes

This policy setting controls computer restart performance at the risk of exposing BitLocker secrets. This policy setting is applied when you turn on BitLocker. BitLocker secrets include key material used to encrypt data. This policy setting applies only when BitLocker protection is enabled. If you enable this policy setting, memory will not be overwritten when the computer restarts. Preventing memory overwrite may improve restart performance but will increase the risk of exposing BitLocker secrets. If you disable or do not configure this policy setting, BitLocker secrets are removed from memory when the computer restarts.

Related policies

Choose default folder for recovery passwordChoose drive encryption method and cipher strength (Windows 10 [Version 1511] and later)Choose drive encryption method and cipher strength (Windows 8, Windows Server 2012, Windows 8.1, Windows Server 2012 R2, Windows 10 [Version 1507])Choose drive encryption method and cipher strength (Windows Vista, Windows Server 2008, Windows 7, Windows Server 2008 R2)Choose how users can recover BitLocker-protected drives (Windows Server 2008 and Windows Vista)Disable new DMA devices when this computer is lockedProvide the unique identifiers for your organization