How to identify files that have been encrypted with EFS?

Archived from groups: microsoft.public.win2000.security (More info?)

Hello,

How do I go about identifying files that my users have encrypted with EFS?

I'm going to disable it, but want to make sure that I can identify what
files are encrypted (through some command line means, I'm not going to look
through every folder in windows explorer).

Also, when I delete the default DRA that's in place, will any encrypted
files that I've missed suddenly become useless? Will the user be able to
decrypt them, but not encrypt them? Or can they still use them normally?

Archived from groups: microsoft.public.win2000.security (More info?)

Daniel Peterson wrote:

> How do I go about identifying files that my users have encrypted
> with EFS?
>
> I'm going to disable it, but want to make sure that I can identify
> what files are encrypted (through some command line means, I'm not
> going to look through every folder in windows explorer).
Hi

Using a VBScript is an option:

http://groups.google.co.uk/groups? [...] 12.phx.gbl



--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/s [...] fault.mspx