Encryption of offline files on windows 7 laptops EFS

[Rod]

I have been asked to encrypt data on our teachers laptops.

Research so far suggest that the easiest way to go with this is to use the built in encryption and just turn it on in the sync centre.

 

I have also found information on a gpo setting to turn this on.

 

All seems a bit too easy ... which makes we nervous..

 

Am I missing something important...?

 

Rod.

[SYNACK]

Is it Windows 7 Enterprise, look into full disk encryption with Bitlocker, EFS files can still be cracked by cracking the local PW DB and recovering it that way, bitlocker mitigates this.

[sted]

i found sync and encrypt that way was a right pita if it went wrong and it did that user could never use that laptop again whatever i did short of format and reinstall even clearning all offline files out it would just never sync for them again. as above if the pcs have tpms id just use bitlocker if you have the option