Microsoft KB Archive/938321

= The Documents folder on a Windows Vista Business-based computer does not maintain its encryption attributes after you upgrade to Windows Vista Ultimate =

Article ID: 938321

Article Last Modified on 6/27/2007

-

APPLIES TO


 * Windows Vista Ultimate
 * Windows Vista Ultimate 64-bit Edition
 * Windows Vista Business
 * Windows Vista Business 64-bit Edition
 * Windows Vista Home Basic
 * Windows Vista Home Basic 64-bit Edition
 * Windows Vista Home Premium
 * Windows Vista Home Premium 64-bit Edition

-



SYMPTOMS
Consider the following scenario. You encrypt a user's Documents folder on a Windows Vista Business-based computer. Then, you upgrade the computer to Windows Vista Ultimate. In this scenario, the encryption attributes for the Documents folder are not maintained. Specifically, the files and the folders in the Documents folder remain encrypted. However, new files that are created in the Documents folder are not automatically encrypted.



CAUSE
This problem occurs because of a bug in the Windows Vista Ultimate upgrade process.



STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the &quot;Applies to&quot; section.



WORKAROUND
To work around this problem, use one of the following methods.

Method 1: Manually encrypt the Documents folder
To manually set the encryption attribute, follow these steps.

Note If there is more than one Documents folder on the computer, follow these steps for each Documents folder.
 * 1) Right-click the Documents folder, and then click Properties.
 * 2) On the General tab, click Advanced.
 * 3) Click to select the Encrypt contents to secure data check box, and then click OK.
 * 4) In the Documents Properties dialog box, click OK.
 * 5) In the Confirm Attributes Changes dialog box, click Apply changes to this folder, subfolders and files, and then click OK.

Method 2: Create a GPO to enforce encryption for the Documents folder
If the computer is a member of an Active Directory domain, create a Group Policy object (GPO) to enforce encryption on the Documents folder. To do this, follow these steps:  On the Active Directory domain controller, click Start, click Run, type gpedit.msc, and then click OK. Expand the following folders:

Computer Configuration

Windows Settings

Security Settings

Public Key Policies

 Right-click Encrypting File System, and then click Properties. Click to select the Encrypt the contents of the user's Documents folder check box, and then click OK.

Note This setting will affect only Windows Vista-based computers.

Keywords: kbexpertiseinter kbbug kbtshoot kbprb KB938321

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.