Forcing Encryption of Local Replicas

HCL Domino Domino Forum
1

I created a Desktop Setting document and specified to Encrypt local replicas. This seems to work, however it still allows the user to change the default settings when creating a new replica. Is there a way to prevent a a user from changing these settings? Thanks, Brian

2

Subject: Forcing Encryption of Local Replicas

Brian,

At some major companies, they have a tool that runs on the desktop to check that every local NSF is encrypted. It’s not too hard to write something like that (maybe sandbox has one?) and you enforce compliance that way. I don’t think you can enforce compliance upon creation, though.

regards,

raphael

3

Subject: RE: Forcing Encryption of Local Replicas

ACLSetter may work:http://www-10.lotus.com/ldd/sandbox.nsf/ecc552f1ab6e46e4852568a90055c4cd/ac1ba5645421b7e285256c940075ef53?OpenDocument&Highlight=0,aclsetter

Or you can try fiddling with this; which is an agent intended to disable the Consistent ACL flag:

'Remove Consistent ACL Flag:

Option Public

Declare Function NSFDbOpen Lib “nnotes.dll” (Byval dbName As String, hDB

As Long) As Integer

Declare Function NSFDbClose Lib “nnotes.dll” (Byval hDB As Long) As

Integer

Declare Function NSFDbReadACL Lib “nnotes.dll” (Byval hDB As Long, hACL As

Long) As Integer

Declare Function ACLSetFlags Lib “nnotes.dll” (Byval hACL As Long, Byval

Flags As Long ) As Integer

Declare Function NSFDbStoreACL Lib “nnotes.dll” (Byval hDB As Long, Byval

hACL As Long, Byval ObjectID As Long, Method As Long) As Integer

Sub Initialize

    Dim hDB As Long, hACL As Long

    rc = NSFDbOpen("database.nsf", hDB)

    rc = NSFDbReadACL(hDB, hACL)

    rc = ACLSetFlags(hACL, &h0)

    rc = NSFDbStoreACL(hDB, hACL, 0, 0)

    rc = NSFDbClose(hdb)

End Sub