Re: Remove domain user ability to encrypt files
From: Torgeir Bakken \(MVP\) (Torgeir.Bakken-spam_at_hydro.com)
Date: 08/29/04
- Next message: JC: "Re: iuhist.xml contents"
- Previous message: Torgeir Bakken \(MVP\): "Re: [Error number: 0x80070424]"
- In reply to: Ryan Nordman: "Remove domain user ability to encrypt files"
- Next in thread: Ryan Nordman: "Re: Remove domain user ability to encrypt files"
- Reply: Ryan Nordman: "Re: Remove domain user ability to encrypt files"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Sun, 29 Aug 2004 02:22:22 +0200
Ryan Nordman wrote:
> Hi,
>
> We're running an entirely Windows Server 2003 network with Windows XP
> Pro client machines.
>
> I'm trying to find a way to remove users ability to encrypt their
> files. [snip]
Hi
For Windows 2000 clients only:
HOW TO: Disable EFS for All Computers in a Windows 2000-Based Domain
http://support.microsoft.com/?kbid=222022
Important: Deleting the EFS recovery agent for the domain will prevent users
on computers running Windows 2000 from encrypting files; however, it will
not prevent users on computers running Windows XP and Windows Server 2003
from encrypting files. In addition, it will disable the recovery agent for
all encrypted files. If users who have previously encrypted files are unable
to decrypt their files for any reason, there will be no recovery agent to
decrypt their files.
For Windows XP Pro and Windows 2003:
How can I disable EFS on Computers Running Windows XP or Windows Server
2003?
The following procedure will show you how to use Group Policy to disable EFS
on computers running Windows XP and Windows Server 2003.
1.. Open the GPO that you want to edit. You can use Active Directory Users
and Computers or the GPMC to edit the GPO.
2.. In the Group Policy Object Editor, expand Computer Configuration,
expand Windows Settings, expand Security Settings, expand Public Key
Policies, and then click Encrypting File System.
3.. Right-click Encrypting File System, and then click Properties.
4.. Clear the Allow users to encrypt files using Encrypting File System
(EFS) check box, and then click OK.
-- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: http://www.microsoft.com/technet/scriptcenter/default.mspx
- Next message: JC: "Re: iuhist.xml contents"
- Previous message: Torgeir Bakken \(MVP\): "Re: [Error number: 0x80070424]"
- In reply to: Ryan Nordman: "Remove domain user ability to encrypt files"
- Next in thread: Ryan Nordman: "Re: Remove domain user ability to encrypt files"
- Reply: Ryan Nordman: "Re: Remove domain user ability to encrypt files"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
