Configure user exemption policy

This policy allows configuring a URL, email address, or phone number that will instruct user to request exemption from BitLocker protection.

The URL and email address will form a hyperlink

The URL format: "http://YourExemptionWebSite "

The mailing address format: "xyz@abc.com"
• The hyperlink will be looks like "mailto: xyz@abc.com?subject=Request exemption from BitLocker protection"

The phone number format: "xxx-xxx-xxx";
• The message will be looks like "Please call xxx-xxx-xxx for applying exemption"

This maximum postpone time field is for configuring a time period that will allow user have opportunity to postpone the BitLocker protection, if the user is planning to apply exemption from BitLocker protection.

If you enable this policy setting, and provide a URL, mailing address, or phone number, the user will be able to apply for exemption and see a dialog for instruction on how to apply exemption form the BitLocker protection. If you left the field empty, the user will not see a message for instruction on how to apply for an exemption from BitLocker protection. The request exemption form will not be available to the user.

If you disable this policy setting, the user will not see a message for instruction on how to apply for an exemption from BitLocker protection. The request exemption form will not be available to the user.

If you do not configure this policy setting, the user will not see a message for instruction on how to apply for an exemption from BitLocker protection. The request exemption form will not be available to the user.

Supported on: At least Windows 7
Registry HiveHKEY_LOCAL_MACHINE
Registry PathSOFTWARE\Policies\Microsoft\FVE\MDOPBitLockerManagement
Value NameAllowUserExemption
Value TypeREG_DWORD
Enabled Value1
Disabled Value0

Maximum days to postpone:

Registry HiveHKEY_LOCAL_MACHINE
Registry PathSOFTWARE\Policies\Microsoft\FVE\MDOPBitLockerManagement
Value NameMaxTimeToGetUserExemption
Value TypeREG_DWORD
Default Value7
Min Value
Max Value
Select the method of contacting users with instructions on how to request an exemption from BitLocker protection:


  1. Provide a URL
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSOFTWARE\Policies\Microsoft\FVE\MDOPBitLockerManagement
    Value NameUserExemptionMessageType
    Value TypeREG_DWORD
    Value0
  2. Provide an email address
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSOFTWARE\Policies\Microsoft\FVE\MDOPBitLockerManagement
    Value NameUserExemptionMessageType
    Value TypeREG_DWORD
    Value1
  3. Provide a phone number or message
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSOFTWARE\Policies\Microsoft\FVE\MDOPBitLockerManagement
    Value NameUserExemptionMessageType
    Value TypeREG_DWORD
    Value2

Enter the appropriate URL, e-mail address, or phone number to contact the user with instructions on how to request an exemption from BitLocker protection:

Registry HiveHKEY_LOCAL_MACHINE
Registry PathSOFTWARE\Policies\Microsoft\FVE\MDOPBitLockerManagement
Value NameUserExemptionMessage
Value TypeREG_SZ
Default Value

bitlockermanagement.admx

Administrative Templates (Computers)

Administrative Templates (Users)