File Share Encryption

We redirect the My Documents folder to a network share via Group Policy, and as a result the PGP keyrings get redirected as well due to their default location going into a "PGP" folder in My Documents.

I'd like to keep these files locally, i.e. in C:\Users\username\PGP instead.  I went to Consumer Policy - General and ticked the checkbox to override the default location and put "%USERPROFILE%\PGP" (without quotes) hoping that I could solve my issue, but it seems to want to keep going into My Documents instead.

Can I even use system variables, and if so, which ones can I use as the above obviously isn't working.

10.2.1 MP2

I found the following within the PGP US help file searching "keyring location" (Question mark in the top right corner when logged into PGP US):

If you use the Override default keyring locations option, PGP Desktop still requires temporary access to the My Documents folder on the user's system. If your IT policy restricts access to users' My Documents folder, please be sure to temporarily enable access when users are installing PGP Desktop.

I'm not sure how you would "temporarily" enable access if you are using folder redirection, for one user?  Seems a bit silly if thats the case...

Here's instructions for moving keyring location inside PGP Desktop

http://www.symantec.com/docs/HOWTO42050

p.s. the Symantec website is 1000000 times better than the PGP manual :)

I want these to default to a folder outside of My Documents; not manually move several hundred.

PGP doesn't seem to like %userprofile% and I'm not sure if it even has support for system variables like that.  I can't statically set C:\PGP as this would cause problems on machines that are shared by more than one person I would assume.

We don't restrict access to their My Docs folder; I just don't want the keys stored on the file server.  There's no reason for them to be stored there.  They should reside on the local machine.

So I wound up finding out how to solve the problem.  Apparently if the keyrings are still in My Docs, PGP seems to think that it's fine and it will leave them there.  I was able to get around this by imaging up a new machine without PGP, renaming the PGP folder in My Documents so PGP couldn't find it, and when PGP was installed and I enrolled, PGP created the PGP folder in %userprofile% and dropped the keyrings there.