OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
RE: Folder Encryption

From: Kurt Levitan (k.levitanverizon.net)
Date: Fri Mar 04 2005 - 15:14:30 CST


Local folders. I'm not worried about them unencrypting. Its just a
requirement from a customer for a project we are working on for them.

-----Original Message-----
From: Miroslaw Slawek Chorazy [mailto:mchorazydepaul.edu]
Sent: Friday, March 04, 2005 3:36 PM
To: focus-mssecurityfocus.com; KL_SecurityFocusspamex.com
Subject: Re: Folder Encryption

* Replies will be sent through Spamex to mchorazydepaul.edu
* For additional info click -> http://www.spamex.com/i/?v=3511220

>Is there a way to use a Group Policy to force folder encryption for a
>>specific folder on a group of PCs (XP) ?

A local or network folder?

If local then there i am not aware of simple setting for this but you
could write a script which is a machine startup script and enforces the
local directory encryption. You could make that script execute on
specific computers which are filtered via either: WMI, OU or Security
Group during computer startup.
But if your users are local admins then i think they can un-encrypt.
Anything below local Admin does not allow them to overwite.

If network folder than make that folder part of your Offline files
hierarchy and there is a GPO setting to force encryption.
Again, if they are local admins then they can overwrite.
 
slawek

>>> <KL_SecurityFocusspamex.com> 3/4/2005 10:00 >>>
Is there a way to use a Group Policy to force folder encryption for a
specific folder on a group of PCs (XP) ?
  - Kurt

---------------------------------------------------------------------------
---------------------------------------------------------------------------

---------------------------------------------------------------------------
---------------------------------------------------------------------------