I have a 40 user network all running XP Pro except for two Vista Business workstations. My DCs are Server 2003. I'm trying to disable users from encrypting files both locally and on network shares. I went into Group Policy, Computer Configuration > Windows Settings > Security Settings > Public Key Policies > Encrypting File System, right-clicked that, chose Properties and unchecked the box for Allow users to encrypt files using Encrypting File System (EFS). That disabled them from encrypting files/folders on the file server but they're still able to encrypt files locally. How can I disable them from doing that without going to each computer and disabling EFS in the local security settings?