Enforcing EFS at ALL TIMES on a folder

#1
I need to enforce a permanent EFS policy on a given folder.
I already know how to turn on the EFS setting on a folder, so that all files copied into it or created in it are automatically encrypted by EFS.

Now, the problem is that Windows allows the user to manually disable the EFS on a file contained within an EFS folder. This is a problem for me, because sometimes I manually change the file settings, and by mistake or forgetfulness I may leave unprotected (by manually removing the EFS setting) a file contained within an EFS folder, mistakenly believing that it is in fact protected.

What I am asking is: is there a way to enforce a permanent EFS policy on the contents of an EFS folder, so that it becomes IMPOSSIBLE to manually turn off the EFS setting of a file contained in that folder?
 


This website is not affiliated, owned, or endorsed by Microsoft Corporation. It is a member of the Microsoft Partner Program.