Users Guide

IMPORTANT:
You must create the folder before the administrator enables the Basic File Protection policy.
1 Use the folder name and path provided by your administrator.
2 Add les with the specied extension, like .txt, that do not need to be encrypted. Optionally, you can add subfolders with user-created
names.
NOTE:
If you have les with that extension that were previously encrypted, placing them in that folder will not decrypt them. They
remain encrypted. If you have an Unprotected Documents folder, which your administrator can create through another
policy, you can place Basic File Protection types in this folder to decrypt them.
3 After Basic File Protection is enabled, if you have unprotected les with that extension on a network or external drive, you can copy
those into the excluded folder. It remains unencrypted. Otherwise, they are encrypted.
If your computer has more than one user, only the current logged-in user can place les in that folder and have them excluded from the
sweep. Any les that another user places in that folder will be swept and encrypted.
Removal of a le extension
Your administrator may decide to remove a le extension. If so, your computer is swept to decrypt those le types.
• The encrypted le's Properties > Dell Data Guardian tab no longer displays.
• If you had le overlay icons, those no longer display.
• The les may take several minutes to complete decrypting. If a le with that extension is still encrypted, it may have been open during
the sweep or stored on a le server or other location.
Contact your administrator to request recovery of any les with that extension that will not decrypt.
Oce applications
You can use an Oce application to open a le encrypted with Basic File Protection but the content is read-only.
Protect Oce Documents and PDFs with Data
Guardian
To enhance enterprise security, your administrator may enable a policy to protect les for these Oce applications:
• .docx, .pptx, .xlsx
• .docm, .pptm, .xlsm
• .pdf
If an unauthorized person accesses a protected le, the le remains encrypted, for example when you:
• Attach it to an email
• Move it in a browser - in some cloud sync clients, you can right-click a le name and select Move.
• Share it on the network
• Store it on removable media
For Oce documents, a cover page may display with instructions for installing or activating Data Guardian, for example:
• You need to install Data Guardian.
• You need to activate Data Guardian.
• You opened a protected Oce document in the cloud.
• You downloaded an Oce le from your computer that has Data Guardian to a personal device that does not have it.
Data Guardian User Guide v2.8
Use Data Guardian with Windows
27