From d65ee1a07ae71f363ae97827339ed2f0649eb6d5 Mon Sep 17 00:00:00 2001 From: "cantab.net!aia21" Date: Thu, 25 Mar 2004 18:55:44 +0000 Subject: [PATCH] (Logical change 1.347) --- doc/encryption.txt | 12 ++++++++++++ 1 file changed, 12 insertions(+) create mode 100644 doc/encryption.txt diff --git a/doc/encryption.txt b/doc/encryption.txt new file mode 100644 index 00000000..c8c6b5d2 --- /dev/null +++ b/doc/encryption.txt @@ -0,0 +1,12 @@ +These are just a collection of notes on encryption in NTFS. + +- System files cannot be encrypted. Check the file attributes and if + FILE_ATTR_SYSTEM is set refuse to encrypt. This also means can sanity + check that FILE_ATTR_SYSTEM and FILE_ATTR_ENCRYPTED are never set together. + +- The desktop.ini file in each directory has a setting which can disallow + encryption of files in it. The section name is Encrpytion and the key name + is Disable. + +- Everything in %windir% except for Profiles directory is not encryptable as + it is considered a system file.