RE: Folder Encryption

From: Miroslaw Slawek Chorazy (mchorazy_at_depaul.edu)
Date: 03/04/05

  • Next message: Don Gray: "RE: Disabling USB mass storage" 
    Date: Fri, 04 Mar 2005 15:24:33 -0600
To: <focus-ms@securityfocus.com>, <KL_SecurityFocus@spamex.com>

    I think Chapter 11 of "Windows 2000 Scripting Guide" called File and
    Folders has specific examples how one can go about
    scripting/monitoring/enforcing folder encyption.

    slawek

    >>> <KL_SecurityFocus@spamex.com> 3/4/2005 15:14 >>>
    Local folders. I'm not worried about them unencrypting. Its just a
    requirement from a customer for a project we are working on for them.

    -----Original Message-----
    From: Miroslaw Slawek Chorazy [mailto:mchorazy@depaul.edu]
    Sent: Friday, March 04, 2005 3:36 PM
    To: focus-ms@securityfocus.com; KL_SecurityFocus@spamex.com
    Subject: Re: Folder Encryption

    * Replies will be sent through Spamex to mchorazy@depaul.edu
    * For additional info click -> http://www.spamex.com/i/?v=3511220

    >Is there a way to use a Group Policy to force folder encryption for a
    >>specific folder on a group of PCs (XP) ?

    A local or network folder?

    If local then there i am not aware of simple setting for this but you
    could write a script which is a machine startup script and enforces
    the
    local directory encryption. You could make that script execute on
    specific computers which are filtered via either: WMI, OU or Security
    Group during computer startup.
    But if your users are local admins then i think they can un-encrypt.
    Anything below local Admin does not allow them to overwite.

    If network folder than make that folder part of your Offline files
    hierarchy and there is a GPO setting to force encryption.
    Again, if they are local admins then they can overwrite.
     
    slawek

    >>> <KL_SecurityFocus@spamex.com> 3/4/2005 10:00 >>>
    Is there a way to use a Group Policy to force folder encryption for a
    specific folder on a group of PCs (XP) ?
      - Kurt

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

  • Next message: Don Gray: "RE: Disabling USB mass storage"

    Relevant Pages

    • [kde] Re: plasma-desktop (KDE factory) acting up?
      ... example is another logging plasmoid that shows the output of a little ... script that outputs the state of my four drives every ten seconds. ... I have the group set to wheel for the logs I want to be read by trusted ... folder with pictures of people, and a subfolder with pictures of myself. ...
      (KDE)
    • Re: User account and Personal folder mismatch script
      ... I believe you want a script that can be run by an administrator that will ... The script above only documents if a home folder has been assigned. ... > End Sub ...
      (microsoft.public.scripting.vbscript)
    • Re: Disappearing Links
      ... I believe someone has a script for rebuilding links but I'm unable to find it at the moment. ... It could be adapted to trawl through the whole mail folder tree - if you really need that, ... -- to any contacts in the address book that match the sender of the messages ... set theSelection to selection ...
      (microsoft.public.mac.office.entourage)
    • Input on CleanUp script
      ... Since I'm going to be using this script in a production environment, ... If the script is used with a backup folder ... var strTargetFolder, strBackupFolder, args0, args1, args2, noArgs; ...
      (microsoft.public.scripting.wsh)
    • Input on CleanUp script
      ... Since I'm going to be using this script in a production environment, ... If the script is used with a backup folder ... var strTargetFolder, strBackupFolder, args0, args1, args2, noArgs; ...
      (microsoft.public.scripting.jscript)