question

JasonLoCascio-9140 avatar image
0 Votes"
JasonLoCascio-9140 asked DaisyZhou-MSFT commented

Use GPO to change to encrypted user folders

Assuming a domain started off with no encryption of user folders, and down the line wanted to mandate it, is it possible to set up a GP on logon that makes the change and starts off the process of encrypting folders in the background ???

Has anyone done this ?

Is it a standard use of GPO ?

windows-group-policy
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hello @JasonLoCascio-9140,
How are things going on your end? Please keep me posted on this issue.
If you have any further questions or concerns about this question, please let us know.
I appreciate your time and efforts.

Best Regards,
Daisy Zhou

============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.

0 Votes 0 ·
DaisyZhou-MSFT avatar image
0 Votes"
DaisyZhou-MSFT answered

Hello @JasonLoCascio-9140,

Thank you for posting here.

Do you have your internal CA server with AD CS role installed and configured?

If so, based on my knowledge, we can try the following GPO to see if it helps.

Computer Configuration\Windows Settings\Security Settings\Public Key Policies\Encrypting File System

For more information above EFS GPO, we can refer to link below.

Controlling Encrypting File System (EFS) using Group Policy
https://techgenix.com/controlling-encrypting-file-system-efs-group-policy/

Please note: Information posted in the given link is hosted by a third party. Microsoft does not guarantee the accuracy and effectiveness of information.


Hope the information above is helpful.

Should you have any question or concern, please feel free to let us know.


Tip: It is recommended that you test in the test environment before deploying in the production environment.
Or it is only applied to one test machine in the production environment. If this function is really what you need, then mass deployment in the production environment.


Best Regards,
Daisy Zhou


============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

JasonLoCascio-9140 avatar image
0 Votes"
JasonLoCascio-9140 answered DaisyZhou-MSFT commented

Thanks for the helpful pointers. It maybe a while before I can test them and report back, but it seems a good starting point. Especially the suggestion of how to test before rolling out.

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hello @JasonLoCascio-9140,

Thank you for your update. I am very glad that the information is helpful.

Should you have any question or concern, please feel free to let us know.

Best Regards,
Daisy Zhou


============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.

0 Votes 0 ·