Can I set encryption on or off by organizational unit? No. You can set the encryption on or off for the entire domain or for specific users in the domain. Domain: End-user: