Decryption

[User54483404]

What are the steps to setup a OU in the system tree such that when ever an encrypted PC is moved to that OU that it is decrypted This should only happen for PCs in this OU only

[vivs]

Hello @User54483404 

Thanks for your post.

Correct me if i am wrong, What you are trying to achieve is to have a Separate sub-group under my Organization in the System Tree where if any encrypted machine is moved to (This newly created sub-group) :It should get decrypted.

If yes ,Please create a new sub-group in system tree from System Tree Actions or select on the new subgroup tab (top).

Once the subgroup is get created please assign a Decryption policy and first check with one test machine.

For Policy creation you need to check with Drive Encryption Team.

Was my reply helpful?

If you find this post useful, please give it a Kudos! Also, please don't forget to select "Accept as a Solution" if this reply resolves your query!

[cdinet]

Do you want this to happen automatically, or just move systems to the decrypted group as needed?  You would set up a group and go to assigned policies and break inheritance for the encryption policy.  Then assign it the policy to decrypt instead of encrypt.  Any systems then that are in that group will inherit that policy assigned to that group.