Encrypting File System (EFS) - Windows 11 Service
Provides the core file encryption technology used to store encrypted files on NTFS file system volumes. If this service is stopped or disabled, applications will be unable to access encrypted files.
This service also exists in Windows 10, 7 and 8.
Startup Type
| Windows 11 version | Home | Pro | Education | Enterprise |
|---|---|---|---|---|
| 21H2 | Manual | Manual | Manual | Manual |
| 22H2 | Manual | Manual | Manual | Manual |
| 23H2 | Manual | Manual | Manual | Manual |
| 24H2 | Manual | Manual | Manual | Manual |
Default Properties
| Display name: | Encrypting File System (EFS) |
| Service name: | EFS |
| Type: | share |
| Path: | %WinDir%\System32\lsass.exe |
| File: | %WinDir%\system32\efssvc.dll |
| Error control: | normal |
| Object: | LocalSystem |
| Privileges: |
|
Default Behavior
The Encrypting File System (EFS) service is running as LocalSystem in a shared process of lsass.exe. Other services might run in the same process. If Encrypting File System (EFS) fails to start, the error is logged. Windows 11 startup proceeds, but a message box is displayed informing you that the EFS service has failed to start.
Dependencies
Encrypting File System (EFS) is unable to start, if the Remote Procedure Call (RPC) service is stopped or disabled.
Restore Default Startup Type for Encrypting File System (EFS)
Automated Restore
1. Select your Windows 11 edition and release, and then click on the Download button below.
2. Save the RestoreEncryptingFileSystemEFSWindows11.bat file to any folder on a local drive such as SSD or a hard disk.
3. Right-click the downloaded batch file and select Properties.
4. Check the Unblock checkbox and click OK.
5. Right-click the batch file again and select Run as administrator.
6. Restart the computer to save changes.
Note. Make sure that the efssvc.dll file exists in the %WinDir%\system32 folder. If this file is missing you can try to restore it from your Windows 11 installation media.