Get rid of Encryption Completely

[golflover]

Has anyone found a way to get rid of Encryption completely? I know it is possible to disable it, but this allows a user to encrypt files under their own profile. I want to completely get rid of encryption all together.

 

[Jontmke]

In the Help for Group Policies it says if you delete the default admins public key without creating another it effectively turns off EFS. Go to Local Computer Policy--Windows Settings--Security Settings--Public Key Policies--Encrypted Data Recovery Agents. In there is the Administrators Certificate. If you Export it to a safe place, you then should be able to delete it.

Jon

There is much pleasure to be gained from useless knowledge. (Bertrand Russell)

 

[golflover]

This allows you to effectively turn off EFS, but still allows the user to encrypt anything under their own profile under docs and settings. I want to completely turn off EFS so nothing can be encrypted on the drive. Any ideas?