A Disk Encryption policy can either be enabled or disabled. When a device receives an enabled policy, the Full Disk Encryption Agent applies the policy. When a device receives a disabled policy, the agent ignores the policy.
By default, a Disk Encryption policy is enabled during creation of the policy. The following sections explain how to disable a policy and enable it again.