RE: Finding EFS Encrypted Files on a volume

["Josh Taylor" <Josh.Taylor () mossadams com>]

You could use VBScript / WMI to enumerate all encrypted files.  The WMI
file object has two properties (Encrypted and EncryptionMethod) that
tell you what you want to know.

For an Example see:
http://www.microsoft.com/technet/scriptcenter/guide/sas_fil_ciaj.mspx?mf
r=true

_____________________________<br>
CONFIDENTIALITY NOTICE:  This email and any attachments are for
the sole use of the intended recipient(s) and contain information
that may be confidential and/or legally privileged.  If you have
received this email in error, please notify the sender by reply
email and delete the message.  Any disclosure, copying,
distribution or use of this communication by someone other than
the intended recipient is prohibited.

---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------