ZENworks has three distinct encryption capabilities: (1) encrypting fixed disk volumes, (2) encrypting removable data drives, and (3) encrypting fixed disk folders.
Encrypting fixed disk volumes is enabled by configuring and deploying the Disk Encryption Policy to devices after activating Full Disk Encryption.
Encrypting removable data drives and fixed disk folders is enabled by configuring and deploying the Microsoft Data Encryption Policy to devices after activating Endpoint Security.
The Microsoft Data Encryption Policy manages the encrypting capabilities of Microsoft BitLocker and Encrypting File System (EFS) to encrypt removable data drives and fixed disk folders, respectively. You can enable either feature independently in the policy or enable them both in the policy.