I think Chapter 11 of "Windows 2000 Scripting Guide" called File and
Folders has specific examples how one can go about
scripting/monitoring/enforcing folder encyption.
slawek
<KL_SecurityFocus@spamex.com> 3/4/2005 15:14 >>>
Local folders. I'm not worried about them unencrypting. Its just a
requirement from a customer for a project we are working on for them.
-----Original Message-----
From: Miroslaw Slawek Chorazy [mailto:mchorazy@depaul.edu]
Sent: Friday, March 04, 2005 3:36 PM
To: focus-ms@securityfocus.com; KL_SecurityFocus@spamex.com
Subject: Re: Folder Encryption
* Replies will be sent through Spamex to mchorazy@depaul.edu
* For additional info click -> http://www.spamex.com/i/?v=3511220
Is there a way to use a Group Policy to force folder encryption for a
specific folder on a group of PCs (XP) ?
A local or network folder?
If local then there i am not aware of simple setting for this but you
could write a script which is a machine startup script and enforces
the
local directory encryption. You could make that script execute on
specific computers which are filtered via either: WMI, OU or Security
Group during computer startup.
But if your users are local admins then i think they can un-encrypt.
Anything below local Admin does not allow them to overwite.
If network folder than make that folder part of your Offline files
hierarchy and there is a GPO setting to force encryption.
Again, if they are local admins then they can overwrite.
slawek
<KL_SecurityFocus@spamex.com> 3/4/2005 10:00 >>>
Is there a way to use a Group Policy to force folder encryption for a
specific folder on a group of PCs (XP) ?
- Kurt
---------------------------------------------------------------------------
---------------------------------------------------------------------------
---------------------------------------------------------------------------
---------------------------------------------------------------------------
