Guest User!

You are not Sophos Staff.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 13 replies
  • Answers 1 answer
  • Subscribers 8 subscribers
  • Views 9601 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

OneDrive not synchronizing encrypted files

rfrancois

Hi,

I have on my OneDrive folder some symbolic links to other folders, nothing special. My problem is with two links that points to folders encrypted with Safeguard location based encryption: one that points to a local folder, and one that points to a network location. None of the files inside this links are being synchronized by OneDrive, only the folder structure. 

All the other folders and links inside my OneDrive sync normally.

 

My SafeGuard version: 8.00.6.2

 

I've already tried all the bellow without luck:

- Adding the path to the OneDrive link to the location based encryption policy (<User Profile>\OneDrive\FOLDER)

- Adding Cloud Storage Definition, following this KB: https://community.sophos.com/kb/en-us/125710

- Adding OneDrive as an Ignored Application on my General Setttings policy

 

Removing the encryption allows the files to sync normally.

 

Thanks!



This thread was automatically locked due to age.
  • 0

    Hi  

    Would you please provide the screenshot of your One drive folder where symbolic links are stored? If possible the screenshot of the policy of CSD which you have applied on the machine and also RSOP of the safeguard policy assigned to the machine.

  • 0 in reply to Jasmin

    Hi Jasmin,

    The first and last links are the ones encrypted with safeguard

     

    I made a CSD just like the KB on my original post. Because, to my understanding, the CSD is just needed to encrypt files that are not encrypted, I removed the CSD and the policy from my configuration.

     

    Both links point to these two locations, one local and one on the network

     

    Thanks!

  • 0 in reply to rfrancois

    Hi  

    Would you please also enter the onedrive.exe into the trusted application as well? After that try with CSD and without CSD to synchronize those file.

    Would you please share the screenshot of the file encryption policy as well? I just want to confirm that you haven't enabled the One drive On-demand feature.

    If that is enabled, then there is a compatibility issue with Safeguard which is already mentioned in this article. 

  • 0

    Hi -I've had exactly this issue and caused a lot of problems!

    The solution I came up with was removing the file encryption options - as we didn't use it. That WILL resolve the issue but not ideal if you use file encryption AND it requires modifying the clients too.

    I did NOT have an active FE policy - yet the FE "default" policy was fouling with everything.

    However - I did this as a rolling programme so in the interim I set these exclusions into the current policy...

     

    Note the HIDDEN CACHE OneDrive folder - Didn't spot this at first but issue continued until I added this additional exclusion...

     

  • 0 in reply to Jasmin

    Hi Jasmin,

    I added it to trusted and tried with and without the CSD, but no luck.

     

    I was already aware about the problem with the On-demand feature and a while back disabled it via GPO

    That completely removes the option from the OneDrive client

    My file encryption policy:

     

    Thanks!

  • 0 in reply to MichaelMcLannahan

    Hi Michael, 

    Thanks for your reply!

    I already had a policy ignoring everything on the C drive, including subfolders, so I think all that includes all the folders in your printscreen.

    Even so, i tried adding then explicitly, but it didnt work.

    Thanks!

  • 0 in reply to rfrancois

    Do you use File Encryption Francois?

     

  • 0 in reply to rfrancois

    Hi  

    Would you please try to test on a system by upgrading to 8.10 version or newer and install file encryption engine build 31? Just to confirm, if the minifilter driver changes the behavior. 

  • 0 in reply to MichaelMcLannahan

    Hi Michael,

    Yes, I use it on the destination folder of those symbolic links

  • 0 in reply to Shweta

    Hi Shweta,

    I upgraded my client to version 8.3. At first I thought that the upgrade worked because after the reboot OneDrive started uploading those encripted files. The problem this time is that the upload never completes and OneDrive randomly finds a sync problem saying that the file is "open in another process"

    Besides that my computer became very laggy after the upgrade, maybe because of OneDrive, so I reverted back to 8.0.6.2

    Thanks