Reference Guide

Manage Policies
170
What this does: On the C: drive, this causes all files with the extension bat, exe, and dll to not be
encrypted.
Encrypting/Not Encrypting Directories
In order to include or exclude directories using encryption rules, use the following within your rules:
• After specifying your directory location, you do not need to list a trailing backslash (\).
• If you list a directory for inclusion, every file contained within that directory will be encrypted.
• The Override command (^) can be used with folders only when specifying an exclusion policy.
• The At command (@) can be used with folders.
• The Not command (-) can be used with folders.
• You can make any combination of the supported modifiers for folders. If the Override command (^)
is used, the statement can only be an exclusion statement.
Examples of folder inclusion/exclusion
C:\CustomApplication\DataStore
What this does: On the C: drive, this causes every file within the directory of
\CustomApplication\DataStore to be encrypted.
-C:\Documents and Settings\All Users
What this does: On the C: drive, this applies a Category 0 level of protection to the directory of
\Documents and Settings\All Users.
-^2C:\CustomApplication\dll
What this does: On the C: drive, this applies a Category 2 level of protection to the directory of
\CustomApplication\dll.
Sub-directories and Precedence of Directives
Encryption rules may be listed in any order. If more than one rule applies to a given folder or file, then the
following general rules determine which one prevails:
1. The rule with the more specific path prevails.
2. If the rules have equal paths, specified extensions prevail.
3. If the rules both specify extensions, exclusion overrides inclusion.
Example of sub-directories
C:\
-C:\MyApplicationFolder
What this does: (1st statement is an inclusion, 2nd statement is an exclusion) On the C: drive,
encrypt all files in folders at the root level and below, except for files residing in the
protected
directories and any files residing in “MyApplicationFolder”.
Example 1 of competing directives:
C:\
-C:\MyApplicationFolder
^C:\;doc.xls.ppt.docx.xlsx.pptx