Sysprep for workstations in a w2k domain - encrypted folders ?

[Al Dykes]

I found the following restriction to sysprep on the Microsoft SYSPREP
web page;

"If you run Sysprep on an NTFS file system partition that contains
encrypted files or folders, the data in those folders become
completely unreadable and unrecoverable."

My question is; how am I supposed to know if Microsoft uses encryption
within it's products, today, or tomorrow ?

Is there a way to search a file system to see if it has any
encryptd files ?


URL;

http://www.microsoft.com/windowsxp/pro/using/itpro/deploying/
introduction.asp

(unwrap line, of course)

Thanks

 

[Brian Desmond [MVP]]

Unless you've designated a file or folder as encrypted yourself, there won't
be any. Encrypted files/folders show up in green in windows explorer.

--
--
Brian Desmond
Windows Server MVP
(e-mail address removed)12.il.us

Http://www.briandesmond.com

 

[Al Dykes]

Unless you've designated a file or folder as encrypted yourself, there won't
be any. Encrypted files/folders show up in green in windows explorer.

--

And how am I supposed to scan a system with to look for green ?

A dir /s .... something.... is in order to search
a non-trivial file system.

I'm suprised that MS doesn't use encrypton for some part
of the operating system.

 

[Brian Desmond [MVP]]

If you didn't encrypt a file yourself, there aren't going to be any. I don't
know of a programmatic way to search for encrypted files.

--
--
Brian Desmond
Windows Server MVP
(e-mail address removed)12.il.us

Http://www.briandesmond.com

 

[Carrie Garth \(MVP\)]

<SNIP>Is there a way to search a file system to see if it has any encryptd

files?<SNIP>

The following script (modified to fit your requirement) was posted by MVP Scripting
Expert Torgeir Bakken in response to a similar request (Compressed=True). As written
the script searches the C:\ Drive of the local computer for all encrypted files. It
can be modified to search a different drive by replacing the c in the following line
with the desired drive letter: Drive='c:'" .

You must run the WMI script in the cscript environment from a command line. To
display the output in the command-prompt window open the cmd prompt to the directory
where you saved the script (say, encrypted.vbs) and type: cscript encrypted.vbs To
create more readable, permanent output use the command shell's redirection operator
(the > symbol) to send the output to a text file by typing this:
cscript encrypted.vbs > encrypted.txt

----- Begin Message Header -----
From: "Torgeir Bakken (MVP)" <[email protected]>
Newsgroups: microsoft.public.win2000.file_system
Sent: Monday, February 24, 2003 09:10 PM
Subject: Re: How can I list every file in an NTFS FS that has been compresed ?
Google Groups URL to original thread:
http://www.google.com/groups?&[email protected]
----- End Message Header-----
<SNIP>

' BEGIN WMI Script

sComputer = "." ' use "." for local computer

Set oWMI = GetObject("winmgmts:" _
& "{impersonationLevel=impersonate}!\\" & sComputer & "\root\cimv2")

' Getting only the Name property from the files found on local C: drive
' To search an alternative drive replace c in Drive='c:'" with desired drive letter
sWQL = "select Name from cim_datafile where Drive='c:'" _
& "AND Encrypted=True"

Set oResult = oWMI.ExecQuery(sWQL,,48)
For Each oFile In oResult
WScript.Echo oFile.Name
Next

' END WMI Script