File is decrypted but padlock remains, when copied from a shared resource drive to another client
Last Modified: 2022-09-12 15:15:02 Etc/GMT
Affected Products
Languages:
This article is available in the following languages:
Trellix CEO, Bryan Palma, explains the critical need for security that’s always learning.
As per Gartner, "XDR is an emerging technology that can offer improved threat prevention, detection and response."
Trellix announced the establishment of the Trellix Advanced Research Center to advance global threat intelligence.
Trellix Advanced Research Center analyzes threat data on ransomware, nation-states, sectors, vectors, LotL, MITRE ATT&CK techniques, and emails.
After December 1, 2024, please log in to the Thrive Portal for support, knowledge articles, tools, and downloads. For information about using the Thrive Portal, view the Trellix Thrive Portal User Guide.
File is decrypted but padlock remains, when copied from a shared resource drive to another client
Technical Articles ID:
KB69849
Last Modified: 2022-09-12 15:15:02 Etc/GMT EnvironmentFile and Removable Media (FRP) 5.x
Microsoft Windows 7 Microsoft Remote Desktop Protocol (RDP) Problem
Encrypted files copied to another computer using RDP become decrypted. For example, you access an FRP client that was installed using Microsoft Remote Desktop from another FRP client with all drives shared. You then copy an encrypted file from the shared drive to the other FRP client. The file is decrypted, but the file retains the FRP encryption padlock icon.
SolutionThis issue will be resolved in a future product release. This article will be updated when newer information is available.
As a temporary measure, implement the workaround shown below. To receive email notification when this article is updated, click Subscribe on the right side of the page. You must be logged on to subscribe.
To receive information about product updates, sign up for the Support Notification Service.
WorkaroundTo work around this problem, use the FRP Blocked Processes option in the Encryption Options policy.
By listing the application process name as Blocked in the FRP policy. Files are not decrypted for these applications when called on. Instead, the files are given in an encrypted state.
Related InformationFor a related topic where files do not remain encrypted when transferred over a socket communication, see KB68994 - Files transferred over a socket communication do not remain encrypted.
Affected ProductsLanguages:This article is available in the following languages: |
|