Windows Server 2019 must prevent Indexing of encrypted files.

Severity
Group ID
Group Title
Version
Rule ID
Date
STIG Version
mediumV-205694SRG-OS-000095-GPOS-00049WN19-CC-000410SV-205694r958478_rule2025-02-253
Description
Indexing of encrypted files may expose sensitive data. This setting prevents encrypted files from being indexed.
ℹ️ Check
If the following registry value does not exist or is not configured as specified, this is a finding: Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \SOFTWARE\Policies\Microsoft\Windows\Windows Search\ Value Name: AllowIndexingEncryptedStoresOrItems Value Type: REG_DWORD Value: 0x00000000 (0)
✔️ Fix
Configure the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Search >> "Allow indexing of encrypted files" to "Disabled".