Protect desktop, documents, and pictures folders with unique keys per user account, ensuring files are only readable during active sessions—even on shared or multi-user devices. Check out Windows 11, version 24H2's personal data encryption. #Windows1124H2

This seems to overcome the “Mr. Admin always has read rights” problem. However, I didn’t understand the idea where encryption is instantaneous and requires “processing of up to 7 hours.” Also, can this be turned on via GPO or Intune only?

What's the use case for this if standard users can't access other users' profiles? Real world examples would be nice. I think this is a cool solution but not sure how it fits the multi-session or shared system architecture. Maybe using shared accounts?

In the same time, Windows Information Protection WIth Enrollment stops working in W11 24H2. Without any notice.