How can I deploy EFS using Group Policy and automatically encrypt computers for ALL users who login?

How can I deploy EFS using Group Policy and Active Directory with a goal to automatically encrypt computers for ALL users who login? (NOT an option for me to use BitLocker)
I was asked to deploy EFS to encrypt the user my documents folder and profile on all of the users laptops. The laptops are in common areas (board meeting rooms, etc) and security of files is a must.
I successfully created a recovery certificate in AD. I created an OU and setup an EFS policy and users can now login and select to encrypt their own files. The issue is that management would like to have automaticy Encrypt ALL users my documents AUTOMATICALLY
when a user login.
Can this be done?
Please help

Hi,
Any update?
Just checking in to see if the suggestions were helpful. Please let us know if you would like further assistance.
Best Regards,
Andy Qi
TechNet Subscriber Support
If you are
TechNet Subscription user and have any feedback on our support quality, please send your feedback
here.
Andy Qi
TechNet Community Support

Similar Messages

  • How can I allow or block the use of local storage by specific sites for all users in my domain.

    How can I allow or block the use of local storage by specific sites for all users in my domain.
    I tried to do this by MMS.cfg but it is not working, the problem is also described in your blog "http://forums.adobe.com/message/3272907".
    What I Want -: "I want to allow youtube for all the users in my domain and this should be listed in Control panel-->flash player-->storage-->local storage setting by site-->websites tab."

    Wow, cor-el... Did you -intend- your reply to be inane, inappropriate and completely inapplicable?
    How would that possibly do what I asked?
    You -might- consider '''''reading''''' the question, -=before=- you reply. And it's really okay to NOT REPLY if you just don't know. Just an idea.
    Feel better, real soon.

  • How can I set the default home page in Firefox 4 for all users that login to a PC on a Win 7 PC?

    I work at a community college in upstate NY.
    We use Firefox as the default browser at our institution and we have always set the default homepage to be our homepage for all users that login to the PC. We had a procedure to to that that worked with Windows XP and FF 3 or earlier
    We would do the following:
    1. go to: c:\Documents and Settings\Administrator\Application Data\Mozilla\FireFox\Profiles\<profile_name>\prefs.js
    2. Add the line: user_pref (“browser.startup.homepage”,”http://www.genesee.edu”);
    3. Copy the Folder
    C:\Documents & Settings\Administrator\Application Data\Mozilla
    To
    C:\Documents & Settings\Default User\Application Data\Mozilla
    4. Restart the computer
    We're going to Win 7 and Firefox 4 and things seem to be different in terms of files and file structure. Does anyone know how to accomplish this?
    Thanks in advance.

    Making customisation from the default profile is generally considered poor practice and quite often doesn't work out as planned. (If you're interested in some more information on this, [http://mockbox.net/windows-7/227-customise-windows-7-default-profile.html see here] see here)
    This article should help you with developing and deploying your customised Firefox 4 installation (without touching the Windows 7 default user profile):
    http://mockbox.net/configmgr-sccm/174-install-and-configure-firefox-silently.html

  • How can i get difference in base plan and actual/current plan for a project

    Hi PS Experts,
    How can i get difference in base plan and actual plan .
    For example-
    Project1 is created for 10 days (start and end date difference).
    Now in between -project is extended/changed for 12 days .
    What is the way to get 2 days as a difference in base plan and current plan.
    Thanks
    Suraj prakash

    Hi Suraj,
    You can follow a convention that -
    (1) Forecast Start/Finish dates: Used only for Primary planning, once initial planning is done you should not change these dates.
    Now, you will copy the same dates in Basic Start/Finish dates also.
    (2) Basic Start/Finish dates: Whatever changes are done after the initial planning, you will make the changes only in Basic Start/Finish dates.
    So, in Project Planning board, if you enable Forecast and Basic dates with different color coding, you can clearly see the variation in the Project schedule.
    Hope this helps.

  • How can I know about the latest updates / versions which when available for all the CC products, without having to install and check it with the Desktoip Creative Cloud Application ?

    How can I know about the latest updates / versions which when available for all the CC products, without having to install and check it with the Desktoip Creative Cloud Application ?

    Thanks for looking into this Jeff!
    I work with an Inventory module software and is responsible for software detection across several computers. Once an updated version comes up, I update our database with latest software details to get it detected if installed on any machines.
    The problem tracking updates with Desktop Creative Cloud Software are;
    1)We have to have it installed with the CC applications in-order to get the notification of the latest updates and have to check everyday.
    2)Only relates to the latest updates, so in-between we may miss a prior update unknowingly.Hence, the remote machines having those updates may not get  detected with the software version update which would create problem in reporting.
    3)For all CC products, there is no base or previous updates available for installation if we miss one.
    I went through the Adobe Products Update pages [Product updates] which holds good when it comes to Acrobat and Reader software which I follow to track down any newer updates but this is inconsistent when it comes to CC products like in After Effects CC, Dreamweaver CC etc...
    So overall to be very specific, is there any one channel I can follow to get the notifications only for the updates on CC products and then may be I can rely on Desktop Creative Cloud for installation if not available anywhere like in product update pages of Adobe ?
    Regards,
    Subrat

  • How to disable Internet Options using Group Policy Object?

    Dear everybody,
    Please tell me about how to disable Internet Options via group policy to Internet Options on Tool menu, Internet Options on Control Panel and Command control inetcpl.cpl?
    kea

    Hi,
    The location of this GPO in Windows Server 2008 should be:
    User Configuration\Administrative
    Templates\Windows Components\Internet Explorer\Browser menus
    Enable the Group Policy “Tools
    menu: Disable Internet Options… menu option”
    Hope that helps.
    Regards,
    Leo   Huang
    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

  • How do I startup an application for all users at login?

    I know about launchd, but I want an application to start whenver a user logs in and run as that user.  launchd stuff seems to run as root.
    I would prefer to set this up to work for all users, but if that can't be done, just for the current user.  I have an installer package and Id like to run this command to set this up from a bash script.

    I found this bit of code which is very similar to something else I found.
    defaults write ~/Library/Preferences/loginwindow AutoLaunchedApplicationDictionary -array-add '{ "Path" = "/path/to/script"; "Hide" = "0"; }'
    That doesn't work.  Anyone at all, even for a single user, how do I script a command to get an application to start when a user logs in under 10.8?

  • How to restrict the access of "InPlaceRecordsListSettings.aspx" and "InPlaceRecordsSettings.aspx" pages for some users and allow the access for some users?

    I have a requirement to restrict the access of "InPlaceRecordsListSettings.aspx" and "InPlaceRecordsSettings.aspx" pages for some of the users and allow the access for some of the users.
    I have applied the below code on the web.config file but this modification impacting only on the web application level not on the site collection and sub site level.  
    <location path="_layouts/15/InPlaceRecordsSettings.aspx">
        <system.web>
          <authorization>
            <deny users="*" />
          </authorization>
        </system.web>
      </location>
    <location path="_layouts/15/InPlaceRecordsListSettings.aspx">
        <system.web>
          <authorization>
            <deny users="*" />
          </authorization>
        </system.web>
      </location>
    When I tried the access on
    :<portno>/sites/<scname>/_layouts/15/InPlaceRecordsSettings.aspx">http://<servername>:<portno>/sites/<scname>/_layouts/15/InPlaceRecordsSettings.aspx page allowed the access for all users.           
    Please suggest the possible solution to restrict the access of "InPlaceRecordsListSettings.aspx" and "InPlaceRecordsSettings.aspx" pages on SharePoint2013.
    Thanks
    Ramasubbu

    You can't do it from OOTB. 
    _layout folder is accessible to the users if they have read access in any of the site even subsite.
    You can modify *.aspx file, add your custom control which will check user.
    [custom.development]

  • Deploy itunes using group policy

    I've found a few links out there and I feel like I'm really close, but I can't get iTunes to work via MS Group Policy Deployment.  I've followed this article: http://techierambles.blogspot.com/2011/01/deploy-itunes-or-quicktime-msi-files.h tml but I'm not sure if things have just changed too much since 10.1 or what.
    My main issue, I believe, is that I can't get the Apple Application Support MSI to deploy.  I've tried assigning it and publishing it, but no joy.  However, without that MSI the iTunes MSI won't install properly.  Anyone ever run into this?
    Windows Server 2008, Windows 7 clients, iTunes 10.5.2 64-bit, no QuickTime (not a requirement in the newest version of iTunes).
    Thanks,
    Lauren

    I've found a few links out there and I feel like I'm really close, but I can't get iTunes to work via MS Group Policy Deployment.  I've followed this article: http://techierambles.blogspot.com/2011/01/deploy-itunes-or-quicktime-msi-files.h tml but I'm not sure if things have just changed too much since 10.1 or what.
    My main issue, I believe, is that I can't get the Apple Application Support MSI to deploy.  I've tried assigning it and publishing it, but no joy.  However, without that MSI the iTunes MSI won't install properly.  Anyone ever run into this?
    Windows Server 2008, Windows 7 clients, iTunes 10.5.2 64-bit, no QuickTime (not a requirement in the newest version of iTunes).
    Thanks,
    Lauren

  • I recently upgraded my iphone 4 to a iphone5 and everytime i take pictures etc they store on the old phone as well as the new on iloud, how can I set up a new icloud on the old phone for my mum whos now using it without losing everything that was ? thanks

    i recently bought a new iphone 5 and gave the old iphone 4 to my mum.  every time i take picstures they automatically store on the iphone 4, how can i set up a new icloud for my mum on the iphone 4 but keep everything on my iphone 5?

    Your iphone 4 must still be logged into your icloud account.  Go to settings>icloud, scroll to bottom of page and tap Delete Account.  This will remove all your data from the old device but not from icloud or your iphone 5.
    To create a new icloud account for your mum, go to
    http://www.apple.com/icloud/setup/

  • How can I set a customized view in finder set as standard for ALL folders?

    As I have a large number of folders, I need a specific view in finder: symbol view, sort by program and name. I tried to use this settings as standard for ALL folders, but using the 'set as standard' button does only work for the folder I am in, but not for ALL folders. I even tried to use this settings on the hard disk level in finder, but what ever I tried, it never applies to all folders. The problem occurs on each of my devices and on Yosemite OS 10.10.1. as well as Mavericks 10.9.5. Any ideas on how I can make the 'standard' work on all folders?

    As Vinod says, unique key validator would be fine.
    However, In Gabriel's blog:
    Performing a unique key validation for an attribute that is declared to be unique in the database requires a round trip to the database. This is quite expensive and there is a fast and easy way to work around it.Is false on several fronts:
    1). it's not expensive - it's actually cheaper than the alternative
    2). Unique key validator can require many trips to the DB to validate - it must check all other rows in the EO to ensure there is no duplicate, and all of those rows must be fetched into the middle tier to do the validation: this is expensive.
    The "cheapest" way to do this: unique constraint in the DB
    John

  • SAP RM: How can I create a Node when the node is not visible for the user

    Hi,
    Product: SAP records Management for Public Sector
    Version: 7.00
    is it possible to create a instance node when the model not is not visible for the active user?
    I looked in the CL_SRM_XML_REC_MODEL but every methode I used gave me no results with the special user.
    Regards and thanks for every beginning
    Fanninger Thomas

    Hi,
    here an example.
    When I use the method CL_SRM_XML_REC_INSTANCE->IF_SRM_XML_POID~GET_ALL( POID_TAB COUNT_USER_REST COUNT_POID_AUTH ).
    When I used the user with no right for viewing the invisible nodes I get no elements in the tabelle POID_TAB and 38 in the value COUNT_USER_REST.
    So did any one know a solution you can I create a nodes and change the restriction for the new node with the normal user?
    Regards
    Fanninger Thomas
    Edited by: Thomas Fanninger on Feb 5, 2008 8:15 AM

  • How can I recover my master password, set up by mistake, without losing all my existing login / password data?

    When touring the latest version of Firefox I created a master password and unfortunately never wrote it down. Now I must get my Church's taxes and W-2's done and I'm unable to login to my state and IRS/SSA accounts as I don't have my latest logins and passwords because they were all stored in my older version of Firefox. Everything I've read, so far, states that resetting the master password will result in the loss of all my login and password data. I cannot have this happen! There has to be some way I can either recover my login and password file data or the password I created for my master password? I need help with this ASAP as time is running out.

    Thank you for your response. Unfortunately it is not the solution I am hoping for. Both of the links you posted clearly state that resetting or removing my master password will result in the loss of all my existing login and password data. I wouldn't have a problem with that if I could save or print out my current, but hidden by the password manager until I enter my master password, login and password data which I could eventually reproduce within password manager. Unfortunately this is the only place where I have all that data recorded and we are talking about many many lines of login data!
    Bob

  • How to dynamically populate a manager name and level for any user who login

    Hi All,
    I need some help in doing this in my DB:
    Table 1 is the the manager hierarchy {which basically shows the structure of every employee's org).
    Table 2 is a list of all people manager ( all these usernames will also be in table 1). What i need to find is using the username from Table 2, the highest level that username exists in the manager hierarchy.
    For ex:
    Table 1: { What this shows is Sam is CEO and Jeff reports to him. So for Sam, he will exist on all 15 levels and Jeff will have Sam has his top level manager and then Jeff will repeat for all remaining levels till 15.
    Manager Level 0  Level 1  Level 2 Level 3...Level15
    Sam                       Sam     Sam     Sam         Sam
    Sam                        Jeff     Jeff        Jeff          Jeff
    Now in Table 2:
    User Name   Manager Level/Name
    Sam               Manager Level 0 Sam
    Jeff                 Manager Level 1 Jeff
    As you see, for each user name in Table i want to populate their high level from the manager hierarchy {their record in manager hierarchy).
    Hope This helps to clear the confusion.
    Thanks                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   

    Hello,
    this is the forum for the tool {forum:id=260}. Please mark this question as answered, so others know that they can ignore it.
    Then post again in {forum:id=75}
    Regards
    Marcus

  • Hello,  I have lost my IPad during traveling ..how can I remove it from my account and to make sure that the person who take it is not using my account

    Please help

    Report to police along with serial number. Change all your passwords.
    These links may be helpful.
    How to Track and Report Stolen iPad
    http://www.ipadastic.com/tutorials/how-to-track-and-report-stolen-ipad
    Reporting a lost or stolen Apple product
    http://support.apple.com/kb/ht2526
    Report Stolen iPad Tips and iPad Theft Prevention
    http://www.stolen-property.com/report-stolen-ipad.php
    How to recover a lost or stolen iPad
    http://ipadhelp.com/ipad-help/how-to-recover-a-lost-or-stolen-ipad/
    How to Find a Stolen iPad
    http://www.ehow.com/how_7586429_stolen-ipad.html
    Apple Product Lost or Stolen
    http://sites.google.com/site/appleclubfhs/support/advice-and-articles/lost-or-st olen
    Oops! iForgot My New iPad On the Plane; Now What?
    http://online.wsj.com/article/SB10001424052702303459004577362194012634000.html
    If you don't know your lost/stolen iPad's serial number, use the instructions below. The S/N is also on the iPad's box.
    How to Find Your iPad Serial Number
    http://www.ipadastic.com/tutorials/how-to-find-your-ipad-serial-number
    iOS: How to find the serial number, IMEI, MEID, CDN, and ICCID number
    http://support.apple.com/kb/HT4061
     Cheers, Tom

Maybe you are looking for

  • New macbook pro wont accept password

    I moved everything over from my i5 MBP to a new i7 via utilities migration assistant. However the new macbook pro wont accept my password, nor will it recognise the other user account passwords. Works fine on the i5. In Disc Utilities, change passwor

  • Sorting of an Extract

    I am sorting an extract using a field-group already defined in the extract. I am adding a field to the field-group at the end. But the extract is not getting sorted by that field. If I insert the field at the beginning of the field group all the subs

  • Testing Thunderbird 10 and/or Lightning

    I forwarded this message (originally sent to the thunderbird-dev mailing list) to the Comms Suite mailing list ([email protected]). I'm posting it here on the forum for those who aren't subscribed to the mailing list.... >>> Dear Thunderbird tester

  • Calendar/Date TimeZone conversion

    Hi, I am having problems trying to print a date. I am in the West Coast of the US and I want to display a specific time in GMT format. Unfortunately, the time is being displayed in PST and I cannot understand why. Here is what I'm doing: I have creat

  • Mapping Scenario for Retail Industry

    Hi, I  want to know how to implement the following scenario for Sales Process My customer is into retail industry. They have franchisee all over india. They buy material and supply material to all the location. (Which I mapped through Document Series