HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EnhancedStorageDevices

Do not allow password authentication of Enhanced Storage devices
- HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EnhancedStorageDevices\DisablePasswordAuthentication
Do not allow non-Enhanced Storage removable devices
- HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EnhancedStorageDevices\DisallowLegacyDiskDevices
Lock Enhanced Storage when the computer is locked
- HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EnhancedStorageDevices\LockDeviceOnMachineLock
Allow Enhanced Storage certificate provisioning
- HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EnhancedStorageDevices\AllowCertSiloProvisioning
Allow only USB root hub connected Enhanced Storage devices
- HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EnhancedStorageDevices\RootHubConnectedEnStorDevices
Do not allow Windows to activate Enhanced Storage devices
- HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\EnhancedStorageDevices\TCGSecurityActivationDisabled