Remove Location-Based Encryption and PDF copy issue

Question

We are having some issues moving location-based encrypted files to a new share location. We are using robocopy to copy the files. We have added the new shares and keys to the policy.After copying we can open .Doc and .XLS files but all PDF files are corrupted. So we wanted to test some things and remove the location-based file encryption location from the policy for the share but it is not decrypting the files. 
 Even if I try and manually decrypt the files they re-encrypt immediately. ??

Shweta · Answer

Hi cbsp2020 
 If it is location-based encryption, then decryption should be done manually for which the decryption policy has to be applied. If persistent encryption is disabled. then once the file is moved out of the location it gets decrypted automatically. Also, could you please perform below checks: 
 -check for policy settings for old file shares. -check for policy settings for new file shares. -check if the PDF is working in old shares without issues. -decrypt PDF in old shares itself and then try to copy. 
 It would be best to check if any application based encryption rules are applied?

MichaelMcLannahan · Answer

Can you post the RSOP on the device you're trying to use please? 
 
 The fact that if you manually decrypt and then the files re-encrypt means there's a policy being applied elsewhere that's reversing your changes. 
 If we can find this policy (or policy group) then it'll be possible to prevent the re-encryption again.

Remove Location-Based Encryption and PDF copy issue

Top Replies