See Also
To specify that a file should be encrypted when device encryption is turned on, you must add it to the list of encrypted files. You use the Specify device encryption file listGroup Policy setting to specify the path of the file or group of files that you want to add to the encryption list.
A file path entry has the form [PathSpec][FileSpec]. That is, a file specification appended to a path specification, for example, \MyDocuments\MyFile.doc.
The path specification has the following characteristics:
- It cannot be empty.
- It should begin and end with a backslash “\” unless it consists
of only a "\".
- It can contain the following special identifiers:
-
%CEn%:A Windows Embedded CE string that will be translated
into a directory, where "n" is a valid integer value, for example,
%CE5% will be changed to "\My Documents".
If this identifier is present, it must be the first element that follows the starting "\". -
…: The current folder and subfolders. If present, it should
be the last element.
-
%CEn%:A Windows Embedded CE string that will be translated
into a directory, where "n" is a valid integer value, for example,
%CE5% will be changed to "\My Documents".
The file specification has the following characteristics:
- It cannot be empty
- It can contain the following special identifiers:
-
*: All files
-
*:ext All files that have the specified extension
-
*: All files
The following shows examples of how to specify the correct path of any files that you want to add to encryption list.
| Correct path example | Description |
|---|---|
|
\cemail.vol |
The cemail.vol file |
|
\MyDocuments\* |
All files in the My Documents folder |
|
\MyDocuments\...\* |
All files in the My Documents folder and its sub folders |
|
\MyMusic\*.wmv |
All .wmv files in the My Music folder |
|
\MyDoucments\...\*.wmv |
All .wmv files in the My Documents folder and its sub folders |
|
\...\*.wmv |
All .wmv files |
|
\%CE5%\...\* |
All files in the folder identified by the Windows %CE5% string |
The following shows examples of incorrect file paths.
| Incorrect path example | Description |
|---|---|
|
\MyDocuments\...\ |
No file specification. |
|
\MyDocuments\... |
Path does not end in a slash. |
|
\MyDocuments\%CE2%\* |
CE String is not the first element in the path specification. |
|
\MyDocs\...\music\* |
… is not the last element in the path specification. |
|
MyDocuments\* |
Path specification does not begin with a \ (backslash). |
|
\%CEabc%\* |
Not a valid string for Windows Embedded CE because abc is not an integer. |
|
\MyDocuments\abc*.wmv |
You cannot have characters before *. |
|
\MyDocuments\*abc.wmv |
* should be the only element when you search for all files of a specific type. |
To add a file to the encryption
list
-
In the Group Policy Management Console, expand Group Policy Objectsand then locate the target Group Policy object (GPO).
-
Right-click the GPO, and then select Edit.
-
In the Group Policy Object Editor, expand Computer Configuration/Administrative Templates/Windows Mobile Settings, and then select File Encryption.
-
In the details pane, right-click Specify device encryption list, and then select Properties.
-
In the dialog box, on the Settingtab, choose Enabled, and then choose Show.
-
In the Show Contentsdialog box, choose Add.
-
In the Add Itemdialog box, in the Enter the name of the item to be addedbox, type the file name or the path of the file or group of files that you want to add to the list. In the Enter the value of the item to be addedbox, type the file description, if any.
-
Choose OK. In the Show Contentsdialog box, the file name or the path of the file or group of files will appear in the Value Namebox and the file description will appear in the Valuebox.
-
Choose OKtwo times to finish the procedure and close the program.