Endpoint Encryption for Files and Folders 3.2.1 Quick Start ... - McAfee

Creating Encryption PoliciesCreating Encryption PoliciesFor more detailed information about Endpoint Encryption for Files and Folders Policies,see the Endpoint Encryption for Files and Folders Administration Guide. Note thatEndpoint Encryption for Files and Folders policies are not the same as Microsoft®ActiveDirectory policies (GPOs).Endpoint Encryption for Files and Folders Policies define what functions a user canperform with the Endpoint Encryption for Files and Folders Client. For example, theuser’s ability to create their own encrypted files can be switched off, as can the user'sability to manually decrypt data; however, you do not need to be able to decrypt a fileto access it.Endpoint Encryption for Files and Folders policies also control the automatic encryptionof information. For example, you can specify that all .doc files should be created asencrypted, or all files in “My Documents” should be encrypted, or, a folder on anetwork share.A policy may also specify that data written to removable media, such as USB memorydevices and removable hard disks shall always automatically be encrypted.The default settings for a new policy group, or new policy object, prevent anysensitive/critical operation. If you want to allow access to the functions of EndpointEncryption for Files and Folders you need to change the settings of the correspondingpolicy. An example of how to edit an individual policy is described next. As with allobjects in the Endpoint Encryption Central directory, a policy may be individuallyedited, or only edited through the settings at the group level (controlled group).To create a Endpoint Encryption for Files and Folders policy, follow the schema on thenext pages.| 23