If you use ADS as domain login, it is possible to enforce the EFS on the folder
encryption on all other group of machines.
with regards
avm
--- Miroslaw Slawek Chorazy <mchorazy@depaul.edu> wrote:
Is there a way to use a Group Policy to force folder encryption for a
specific folder on a group of PCs (XP) ?
A local or network folder?
If local then there i am not aware of simple setting for this but you
could write a script which is a machine startup script and enforces the
local directory encryption. You could make that script execute on
specific computers which are filtered via either: WMI, OU or Security
Group during computer startup.
But if your users are local admins then i think they can un-encrypt.
Anything below local Admin does not allow them to overwite.
If network folder than make that folder part of your Offline files
hierarchy and there is a GPO setting to force encryption.
Again, if they are local admins then they can overwrite.
slawek
<KL_SecurityFocus@spamex.com> 3/4/2005 10:00 >>>
Is there a way to use a Group Policy to force folder encryption for a
specific folder on a group of PCs (XP) ?
- Kurt
---------------------------------------------------------------------------
---------------------------------------------------------------------------
---------------------------------------------------------------------------
---------------------------------------------------------------------------
__________________________________
Do you Yahoo!?
Make Yahoo! your home page
http://www.yahoo.com/r/hs
---------------------------------------------------------------------------
---------------------------------------------------------------------------
