This functionality is available only in the Administrator version (ZESDecryptAdmin.exe) of the File Decryption utility.
The Endpoint Security Agent uses encryption keys to encrypt files on a device’s fixed disk and on removable storage devices (except in the Password-Encrypted Files folder). The files are referred to as key-encrypted files.
If the Endpoint Security Agent is removed from a device before all of the key-encrypted files are decrypted, you can use the Administrator version of the File Decryption utility to decrypt the orphaned files.