I need to enforce a permanent EFS policy on a given folder. I already know how to turn on the EFS setting on a folder, so that all files copied into it or created in it are automatically encrypted by EFS. Now, the problem is that Windows allows the user to manually disable the EFS on a file contained within an EFS folder. This is a problem for me, because sometimes I manually change the file settings, and by mistake or forgetfulness I may leave unprotected (by manually removing the EFS setting) a file contained within an EFS folder, mistakenly believing that it is in fact protected. What I am asking is: is there a way to enforce a permanent EFS policy on the contents of an EFS folder, so that it becomes IMPOSSIBLE to manually turn off the EFS setting of a file contained in that folder?