I was trying to enable the Encrypted file system (windows EFS) in my box.
Here is a great post describing in detail how to do it:
http://articles.techrepublic.com.com/5100-10878_11-5308684.html
And I faced a lot of problem. I tried to setup the EFS using group policy editor which shows that it is enables. But I used to get the following error message all the time (“This machine is disabled for file encryption”)
I did not know what the problem was, till I got this post.
What basically was happening was that my machine was joined to a primary domain controller and my individual machine settings were not taking effect because the domain controller used to replace it every time.
No way to know this unless you use the effective resultant policy using the command rsop.msc
To view the group policy editor use the command: gpedit.msc
To view the effective resultant policy use the command: rsop.msca
