RE: Folder Encryption

From: Miroslaw Slawek Chorazy (mchorazy_at_depaul.edu)
Date: 03/04/05

  • Next message: Don Gray: "RE: Disabling USB mass storage" 
    Date: Fri, 04 Mar 2005 15:24:33 -0600
To: <focus-ms@securityfocus.com>, <KL_SecurityFocus@spamex.com>

    I think Chapter 11 of "Windows 2000 Scripting Guide" called File and
    Folders has specific examples how one can go about
    scripting/monitoring/enforcing folder encyption.

    slawek

    >>> <KL_SecurityFocus@spamex.com> 3/4/2005 15:14 >>>
    Local folders. I'm not worried about them unencrypting. Its just a
    requirement from a customer for a project we are working on for them.

    -----Original Message-----
    From: Miroslaw Slawek Chorazy [mailto:mchorazy@depaul.edu]
    Sent: Friday, March 04, 2005 3:36 PM
    To: focus-ms@securityfocus.com; KL_SecurityFocus@spamex.com
    Subject: Re: Folder Encryption

    * Replies will be sent through Spamex to mchorazy@depaul.edu
    * For additional info click -> http://www.spamex.com/i/?v=3511220

    >Is there a way to use a Group Policy to force folder encryption for a
    >>specific folder on a group of PCs (XP) ?

    A local or network folder?

    If local then there i am not aware of simple setting for this but you
    could write a script which is a machine startup script and enforces
    the
    local directory encryption. You could make that script execute on
    specific computers which are filtered via either: WMI, OU or Security
    Group during computer startup.
    But if your users are local admins then i think they can un-encrypt.
    Anything below local Admin does not allow them to overwite.

    If network folder than make that folder part of your Offline files
    hierarchy and there is a GPO setting to force encryption.
    Again, if they are local admins then they can overwrite.
     
    slawek

    >>> <KL_SecurityFocus@spamex.com> 3/4/2005 10:00 >>>
    Is there a way to use a Group Policy to force folder encryption for a
    specific folder on a group of PCs (XP) ?
      - Kurt

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

  • Next message: Don Gray: "RE: Disabling USB mass storage"

    Relevant Pages

    • Re: User account and Personal folder mismatch script
      ... I believe you want a script that can be run by an administrator that will ... The script above only documents if a home folder has been assigned. ... > End Sub ...
      (microsoft.public.scripting.vbscript)
    • Input on CleanUp script
      ... Since I'm going to be using this script in a production environment, ... If the script is used with a backup folder ... var strTargetFolder, strBackupFolder, args0, args1, args2, noArgs; ...
      (microsoft.public.scripting.wsh)
    • Input on CleanUp script
      ... Since I'm going to be using this script in a production environment, ... If the script is used with a backup folder ... var strTargetFolder, strBackupFolder, args0, args1, args2, noArgs; ...
      (microsoft.public.scripting.jscript)
    • Re: Disappearing Links
      ... I believe someone has a script for rebuilding links but I'm unable to find it at the moment. ... It could be adapted to trawl through the whole mail folder tree - if you really need that, ... -- to any contacts in the address book that match the sender of the messages ... set theSelection to selection ...
      (microsoft.public.mac.office.entourage)
    • Re: OT:macros or software?
      ... when a .PDF file is stored there, ... words and depending on weather those words are found in that document, move it to a predetermined folder. ... Easy enough if it were a text document, or even Word, as you could write a DOS script, or a VBS script if you had to load Word to read Word documents, although writing such a script can be harder to a beginner than some might think. ... OK the goal is to put the numerous files scattered everywhere on the computer at work into easy to use folders for my staff to access simply. ...
      (uk.comp.homebuilt)