Media Protection

[tom_allen]

I have FDE and Media Encryption enabled as a Policy on my test PC's. When I put a USB drive in it scans first, then  encrypts. I can copy EXE files onto this Drive without issue. Is this the default behavior? I cannot however copy docs without encrypting first. New to the product so forgive my wording of the question.

[PhoneBoy]

Assuming you're using "Encrypt business-related data written to storage devices" as your rule, yes.