File Share Encryption

Hi,

Is this possible? This way we can allow specific users to access a laptop without physically going to them just to add a user in the PGP Deksktop application?

Thanks,

Hello d4ryl1,

There are not a lot of details in your post regarding your environment... It sounds like you do not yet have LDAP Enrollment configured. This might be exactly what you are looking for. It will prompt the user to loin with their Domain Credentials immediately after installation, and they will encroll to the server. Through consumer policy, you can set it to automatically encrypt their disk. That would allow you to have users enrol themselves, and their disks will be automatically encrypted without requiring an administrator to log in to the computer and assist. I will include a link to an LDAP Enrollment article below :

HOW TO: Enable Directory Synchronization - Symantec Encryption Management Server - http://www.symantec.com/docs/HOWTO42094

Additionally, many administrators prefer to automate more of their install / enrollment process with the below guide to Invisitble Silent Enrollment (More complicated to setup, but less work for end-users) :

HOW TO: Enable Invisible Silent Enrollment for Symantec Encryption Desktop Clients -

Article URL http://www.symantec.com/docs/HOWTO59479

If I had missed the mark with the above articles, I can only assume you are talking about giving access to a non-enrolled user where the drive is encrypted to a different enrolled user.

The only methods that will allow certain users to access a disk that they are not directly registered to are designed for administrators to access disks. One such example is with a WDE Admin Passphrase, or another example would be the Disk Administrator Key (more complex to setup )

HOW TO: Encrypt a Disk with WDE Administrator Passphrase by Default - http://www.symantec.com/docs/TECH186055

( More complicated option ) How to use a Disk Administrator Key with Symantec Encryption Desktop and Symantec Encryption Management Server - http://www.symantec.com/docs/HOWTO88862

If you are looking to have users log into disks that they are not registered to, I would like to know why this is important. 
 

This:

"If I had missed the mark with the above articles, I can only assume you are talking about giving access to a non-enrolled user where the drive is encrypted to a different enrolled user."

I got it, we already set a WDE Administator Passphrase few days ago. Although I never saw the smartcard approach with Disk Administrator Key yet. I'll look in to it.

Thank you,

d4ryl1,

Thank you for confirming the solution. I'm glad you were able to set up the WDE admin passphrase, and have another solution that may work for you as well. Feel free to let me know if you have any more questions regarding the Disk Admin Key...