Sysprep for workstations in a w2k domain - encrypted folders ?

[Al Dykes]

I found the following restriction to sysprep on the Microsoft SYSPREP
web page;

"If you run Sysprep on an NTFS file system partition that contains
encrypted files or folders, the data in those folders become
completely unreadable and unrecoverable."

My question is; how am I supposed to know if Microsoft uses encryption
within it's products, today, or tomorrow ?

Is there a way to search a file system to see if it has any
encryptd files ?

URL;

http://www.microsoft.com/windowsxp/pro/using/itpro/deploying/
introduction.asp

(unwrap line, of course)

Thanks

--
Al Dykes
-----------
ady...@panix.com

[Brian Desmond [MVP]]

Unless you've designated a file or folder as encrypted yourself, there won't
be any. Encrypted files/folders show up in green in windows explorer.

--
--
Brian Desmond
Windows Server MVP
desm...@payton.cps.k12.il.us

Http://www.briandesmond.com

"Al Dykes" <ady...@panix.com> wrote in message
news:bmbvqr$5b3$1...@panix2.panix.com...

[Al Dykes]

In article <uP9n2oRk...@TK2MSFTNGP09.phx.gbl>,

Brian Desmond [MVP] <desm...@payton.cps.k12.il.us> wrote:
>Unless you've designated a file or folder as encrypted yourself, there won't
>be any. Encrypted files/folders show up in green in windows explorer.
>
>--

And how am I supposed to scan a system with to look for green ?

A dir /s .... something.... is in order to search
a non-trivial file system.

I'm suprised that MS doesn't use encrypton for some part
of the operating system.

[Brian Desmond [MVP]]

If you didn't encrypt a file yourself, there aren't going to be any. I don't
know of a programmatic way to search for encrypted files.

--

--
Brian Desmond
Windows Server MVP
desm...@payton.cps.k12.il.us

Http://www.briandesmond.com

"Al Dykes" <ady...@panix.com> wrote in message

news:bmcu6o$2hc$1...@panix2.panix.com...

[Carrie Garth (MVP)]

"Al Dykes" <adykes AT panix DOT com> wrote in message
news:bmbvqr$5b3$1...@panix2.panix.com Sent: Sunday, October 12, 2003 11:34 AM

> <SNIP>Is there a way to search a file system to see if it has any encryptd
files?<SNIP>

The following script (modified to fit your requirement) was posted by MVP Scripting
Expert Torgeir Bakken in response to a similar request (Compressed=True). As written
the script searches the C:\ Drive of the local computer for all encrypted files. It
can be modified to search a different drive by replacing the c in the following line
with the desired drive letter: Drive='c:'" .

You must run the WMI script in the cscript environment from a command line. To
display the output in the command-prompt window open the cmd prompt to the directory
where you saved the script (say, encrypted.vbs) and type: cscript encrypted.vbs To
create more readable, permanent output use the command shell's redirection operator
(the > symbol) to send the output to a text file by typing this:
cscript encrypted.vbs > encrypted.txt

----- Begin Message Header -----
From: "Torgeir Bakken (MVP)" <Torgeir.B...@hydro.com>
Newsgroups: microsoft.public.win2000.file_system
Sent: Monday, February 24, 2003 09:10 PM
Subject: Re: How can I list every file in an NTFS FS that has been compresed ?
Google Groups URL to original thread:
http://www.google.com/groups?&threadm=3E5ADE9D.6C63E645%40hydro.com
----- End Message Header-----
<SNIP>

' BEGIN WMI Script

sComputer = "." ' use "." for local computer

Set oWMI = GetObject("winmgmts:" _
& "{impersonationLevel=impersonate}!\\" & sComputer & "\root\cimv2")

' Getting only the Name property from the files found on local C: drive
' To search an alternative drive replace c in Drive='c:'" with desired drive letter
sWQL = "select Name from cim_datafile where Drive='c:'" _
& "AND Encrypted=True"

Set oResult = oWMI.ExecQuery(sWQL,,48)
For Each oFile In oResult
WScript.Echo oFile.Name
Next

' END WMI Script

--
Carrie Garth, Microsoft MVP for Windows 2000
-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- c x g