JSI Tip 4345. Windows XP clients can encrypt data without a Recovery Agent?

Windows XP clients can encrypt files and folders without a recovery agent.

This feature means that an administrator cannot decrypt the file without the users credentials.

To prevent this from occurring on your network, apply the following .reg file to each Windows XP computer:

Windows Registry Editor Version 5.00

\[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\EFS\]
"EfsConfiguration"=dword:00000001

\[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\CurrentVersion\EFS\]
"EfsConfiguration"=dword:00000001