Reference Guide

Security Management Server Virtual - AdminHelp v9.8
125
policy is toggled to OFF, no
policy
-based encryption takes
place, regardless of other policy
values.
On means that all Policy
-Based
Encryption policies are enabled.
Changing the value of this policy
triggers a new sweep to
encrypt/decrypt files.
Application Data Encryption Key Common
Common, User, User Roaming
Choose a key to indicate who
should be able to access files
encrypted by Application Data
Encryption List, and where.
More...
Common if you want these files
to be accessible to all managed
users on the computer where
the
y were created (the same
level of access as Common
Encrypted Folders), and
encrypted with the Common
Encryption Algorithm.
User if you want these files to be
accessible only to the user who
created them, only on the
computer where they were
created (the sa
me level of access
as User Encrypted Folders), and
encrypted with the User
Encryption Algorithm.
User Roaming if you want these
files to be accessible only to the
user who created them, on any
encrypted Windows computer,
and encrypted with the User
Encrypt
ion Algorithm.
Changes to this policy do not
affect files already encrypted
because of this policy.
SDE Encryption Enabled Not Selected
If this policy is not selected, SDE
encryption is disabled, regardless
of other policy values. Selected
means that all
data not
encrypted by other Intelligent
Encryption policies will be
encrypted per the SDE Encryption
Rules policy. Changing the value
of this policy requires a reboot.
SDE Encryption Rules
String
F#:\
-^%ENV:SYSTEMDRIVE%\System Volume Information
-^%ENV:SYSTEMROOT%\;dll.exe.sys.ocx.man.cat.manifest.policy
-^%ENV:SYSTEMROOT%\System32
-^%ENV:SYSTEMROOT%\SysWow64
-^%ENV:SYSTEMROOT%\WinSxS
-^%ENV:SYSTEMROOT%\Fonts
^3@%ENV:SYSTEMROOT%\SYSTEM32\;exe
Encryption rules to be used to
encrypt/not encrypt certain
drives, directories, and folders.
See
Encryption Rules for
information.
SDE Encrypti
on Rules may be
changed as appropriate for your
environment. However, these
defaults have been tested
extensively. Removing these
exclusions may result in Windows
issues, particularly after applying
patch updates.
Contact ProSupport for guidance
if you are
unsure about changing
the values.