Justine Herrok
New Member
- Joined
- Dec 3, 2013
I need to enforce a permanent EFS policy on a given folder.
I already know how to turn on the EFS setting on a folder, so that all files copied into it or created in it are automatically encrypted by EFS.
Now, the problem is that Windows allows the user to manually disable the EFS on a file contained within an EFS folder. This is a problem for me, because sometimes I manually change the file settings, and by mistake or forgetfulness I may leave unprotected (by manually removing the EFS setting) a file contained within an EFS folder, mistakenly believing that it is in fact protected.
What I am asking is: is there a way to enforce a permanent EFS policy on the contents of an EFS folder, so that it becomes IMPOSSIBLE to manually turn off the EFS setting of a file contained in that folder?
I already know how to turn on the EFS setting on a folder, so that all files copied into it or created in it are automatically encrypted by EFS.
Now, the problem is that Windows allows the user to manually disable the EFS on a file contained within an EFS folder. This is a problem for me, because sometimes I manually change the file settings, and by mistake or forgetfulness I may leave unprotected (by manually removing the EFS setting) a file contained within an EFS folder, mistakenly believing that it is in fact protected.
What I am asking is: is there a way to enforce a permanent EFS policy on the contents of an EFS folder, so that it becomes IMPOSSIBLE to manually turn off the EFS setting of a file contained in that folder?
