How do I prevent users from encrypting files?

[Ric_]

Some of the little darlings have started encrypting files in the shared folders - hilariously funny I know!

 

How do I put a stop to this without having to edit the Desktop.ini file in every writable area?

[indie]

If they're doing it with EFS then do the following:

 

1. Open the GPO

 

2. In the Group Policy Object Editor, expand Computer Configuration, expand Windows Settings, expand Security Settings, expand Public Key Policies, and then click Encrypting File System.

 

3. Right-click Encrypting File System, and then click Properties.

 

4. Clear the Allow users to encrypt files using Encrypting File System (EFS) check box, and then click OK.

[indie]

And a quick way to check which little angel did it is this:

 

efsinfo /r /u filename