Work Folders Hardening
Currently Work Folders allows us to Encrypt data on the client device. This is a nice feature, the data within the Work Folder on the client device is encrypted. However, at any point in time, a user can Right Click their Work folder and "Remove Enterprise Control" at which point data is unencrypted. Also, at any point in time a user can open the properties of a file and choose to remove encryption. We do not want users to be able to remove encryption, if we chose to encrypt the contents of the work folders it should remain encrypted. This should be enforced either at server level, or at least give options to manage via group policy.