11/11/2008

To specify that a file should be encrypted when device encryption is turned on, you must add it to the list of encrypted files. You use the Specify device encryption file listGroup Policy setting to specify the path of the file or group of files that you want to add to the encryption list.

A file path entry has the form [PathSpec][FileSpec]. That is, a file specification appended to a path specification, for example, \MyDocuments\MyFile.doc.

The path specification has the following characteristics:

The file specification has the following characteristics:

The following shows examples of how to specify the correct path of any files that you want to add to encryption list.

Correct path example Description

\cemail.vol

The cemail.vol file

\MyDocuments\*

All files in the My Documents folder

\MyDocuments\...\*

All files in the My Documents folder and its sub folders

\MyMusic\*.wmv

All .wmv files in the My Music folder

\MyDoucments\...\*.wmv

All .wmv files in the My Documents folder and its sub folders

\...\*.wmv

All .wmv files

\%CE5%\...\*

All files in the folder identified by the Windows %CE5% string

The following shows examples of incorrect file paths.

Incorrect path example Description

\MyDocuments\...\

No file specification

\MyDocuments\...

Path does not end in a slash

\MyDocuments\%CE2%\*

CEString is not the first element in the path specification

\MyDocs\...\music\*

… is not the last element in the path specification

MyDocuments\*

Path specification does not begin with a \

\%CEabc%\*

Not a valid Windows CE string because abc is not an integer

\MyDocuments\abc*.wmv

You cannot have characters before *

\MyDocuments\*abc.wmv

* should be the only element when you search for all files of a specific type.

To add a file to the encryption list

  1. In the Group Policy Management Console, expand Group Policy Objectsand then locate the target GPO.

  2. Right-click the GPO and then select Edit.

  3. In the Group Policy Object Editor, expand Computer Configuration, and then expand Administrative Templates.

  4. Expand Windows Mobile Settingsand then select File Encryption.

  5. In the details pane, right-click Specify device encryption listand then select Properties.

  6. In the dialog box, on the Settingtab, choose Enabled, and then choose Show.

  7. In the Show Contentsdialog box, choose Add.

  8. In the Add Itemdialog box, in the Enter the name of the item to be addedbox, type the file name or the path of the file or group of files that you want to add to the list. In the Enter the value of the item to be addedbox, type the file description, if any.

  9. Choose OK. In the Show Contentsdialog box, the file name or the path of the file or group of files will appear in the Value Namebox and the file description will appear in the Valuebox.

  10. Choose OKtwo times to finish the procedure and close the program.

See Also

Other Resources