Introduction / Context:
Windows 7 includes the Offline Files feature, which allows client computers to cache copies of files that reside on a network share. This is very useful for portable computers that may disconnect from the corporate network. At the same time, organizations often require that cached data is encrypted to protect sensitive information if the portable device is lost or stolen. This question focuses on configuring a Windows 7 client to both cache and encrypt offline files from a network share.
Given Data / Assumptions:
- Computer1 runs Windows 7 and is a portable client machine.
- Server1 runs Windows Server 2008 and hosts a shared folder named Share1.
- The user needs offline access to files in Share1 when the server is unavailable.
- The cached copies on Computer1 must be encrypted to protect data at rest.
- You are allowed to configure settings on Computer1.
Concept / Approach:Offline Files in Windows 7 can be enabled per share so that files are cached locally in a special offline cache. Additionally, Windows provides an option to encrypt this offline files cache using the user account encryption keys. This is separate from BitLocker, which encrypts entire volumes. To satisfy the requirement, you must mark Share1 as available offline on Computer1 and then enable encryption for Offline Files in the Offline Files settings dialog in Control Panel, ensuring cached content is encrypted automatically.
Step-by-Step Solution:Step 1: On Computer1, browse to the network path for Share1 on Server1.Step 2: Right click the shared folder and choose the option to always make the files available offline so that Windows creates a local cache.Step 3: Open Control Panel and access the Sync Center or Offline Files settings.Step 4: In the Offline Files settings, enable encryption of the offline files cache.Step 5: After configuration, Windows will cache and encrypt copies of Share1 files on Computer1 while still providing network access when Server1 is online.Verification / Alternative check:You can confirm that offline files are working by disconnecting Computer1 from the network and then opening files that were previously synchronized from Share1. They should remain available. To verify encryption, inspect Offline Files settings to ensure the encryption option is enabled. Additionally, other user accounts on the same machine will not be able to read the encrypted cached files, which further confirms that client side encryption is applied.
Why Other Options Are Wrong:Option A encrypts data on Server1 but does not ensure that cached copies on Computer1 are encrypted. Option B uses BitLocker on Server1, which protects the server disk but not specifically the offline cache on Computer1. Option D uses BitLocker on Computer1 but only for the Documents library, and it does not integrate directly with Offline Files caching. The requirement is specifically to encrypt cached offline files, which is best addressed by enabling encryption of the Offline Files cache on the client.
Common Pitfalls:Administrators sometimes confuse BitLocker volume encryption with Offline Files encryption. BitLocker protects the entire drive but may not be available or may be excessive for certain scenarios. Also, encrypting files only on the server does not protect cached copies on a mobile client. Remember that Offline Files has its own encryption option that is intended precisely for securing cached network content on laptops and portable devices.
Final Answer:The correct solution is to make Share1 available offline on Computer1 and enable encryption of Offline Files on the Windows 7 client.
Discussion & Comments