Deployment Guide

Policy Aggre
ssive
Protec
tion
for All
Fixed
Drives
and
Extern
al
Drives
PCI
Regula
tion
Data
Breac
h
Regula
tion
HIPAA
Regula
tion
Basic
Protec
tion
for All
Fixed
Drives
and
Ext
Drives
(Defau
lt)
Basic
Protec
tion
for All
Fixed
Drives
Basic
Protec
tion
for
Syste
m
Drive
Only
Basic
Protec
tion
for
Extern
al
Drives
Encry
ption
Disabl
ed
Description
value means that no
encryption takes place,
regardless of other policy
values.
A True value means that
all encryption policies are
enabled.
Changing the value of
this policy triggers a new
sweep to encrypt/decrypt
files.
Common
Encrypted
Folders
String - maximum of 100
entries of 500 characters
each (up to a maximum of
2048 characters)
A list of folders on
endpoint drives to be
encrypted or excluded
from encryption, which can
then be accessed by all
managed users who have
access to the endpoint.
The available drive letters
are:
#: Refers to all drives
f#: Refers to all fixed
drives
r#: Refers to all removable
drives
Important: Overriding
directory protection can
result in an unbootable
computer and/or require
reformatting drives.
If the same folder is
specified in both this policy
and the User Encrypted
Folders policy, this policy
prevails.
Common
Encryptio
n
Algorithm
AES256 AES-256, Rijndael 256,
AES 128, Rijndael 128
System paging files are
encrypted using AES-128.
44 Policies and Template Descriptions