Placeholders for paths in application-based File Encryption rules

The following placeholders can be used when specifying paths in encryption rules in File Encryption policies. You can select these placeholders by clicking the drop-down button of the Path field.

Note: Always use backslashes as path separators, even when creating File Encryption rules for Mac OS X. This allows you to apply rules on both operating systems, Windows and Mac OS X. On Mac OS X client side, backslashes will automatically be transformed to slashes in order to match the requirements of the Mac OS X operating system. Any errors in placeholders are logged. Invalid File Encryption rules are logged and then discarded on the endpoint.

Example: The Windows path <User Profile>\Dropbox\personal is converted on Mac side into /Users/<Username>/Dropbox/personal.

Path placeholder Operating System (All=Windows and Mac OS X) Results in the following value on the endpoint
<%environment_variable_name%> All The value of environment variable. Example: <%USERNAME%>.
Note: If environment variables contain several locations (for example the PATH environment variable), the paths will not be separated into multiple rules. This causes an error and the encryption rule is invalid.
<Desktop> All The virtual folder that represents the endpoint's desktop.
<Documents> All The virtual folder that represents the My Documents desktop item (equivalent to CSIDL_MYDOCUMENTS). Typical path: C:\Documents and Settings\username\My Documents.
<Downloads> All The folder where downloads are stored by default. A typical path for Windows is C:\Users\username\Downloads.
<Music> All The file system directory that serves as a data repository for music files. Typical path: C:\Documents and Settings\User\My Documents\My Music.
<Network Shares> All  
<Pictures> All The file system directory that serves as a data repository for image files. Typical path: C:\Documents and Settings\username\My Documents\My Pictures.
<Public> All The file system directory that serves as a common repository for document files for all users. Typical path: C:\Users\<username>\Public.
<Removables> All Points to the root folders of all removable media.
<User Profile> All The user's profile folder. Typical path: C:\Users\username.
Note: Encrypting the whole user profile with this placeholder may result in an unstable Windows desktop on the endpoint.
<Videos> All The file system directory that serves as a common repository for video files for users. Typical path: C:\Documents and Settings\All Users\Documents\My Videos.
<Cookies> Windows The file system directory that serves as a common repository for internet cookies. Typical path: C:\Documents and Settings\username\Cookies.
<Favorites> Windows The file system directory that serves as a common repository for the user's favorite items. Typical path: \Documents and Settings\username\Favorites.
<Local Application Data> Windows The file system directory that serves as a data repository for local (non-roaming) applications. Typical path: C:\Documents and Settings\username\Local Settings\Application Data.
<Program Data> Windows The file system directory that contains application data for all users. Typical path: C:\Documents and Settings\All Users\Application Data.
<Program Files> Windows The Program Files folder. Typical path: \Program Files. For 64-bit systems, there will be two rules - one for 32-bit applications and one for 64-bit applications.
<Public Music> Windows The file system directory that serves as a common repository for music files for all users. Typical path: C:\Documents and Settings\All Users\Documents\My Music.
<Public Pictures> Windows The file system directory that serves as a common repository for image files for all users. Typical path: C:\Documents and Settings\All Users\Documents\My Pictures
<Public Videos> Windows The file system directory that serves as a common repository for video files for all users. Typical path: C:\Documents and Settings\All Users\Documents\My Videos.
<Roaming> Windows The file system directory that serves as a common repository for application-specific data. Typical path: C:\Documents and Settings\username\Application Data.
<System> Windows The Windows System folder. Typical path: C:\Windows\System32. For 64-bit systems, there will be two rules - one for 32-bit and one for 64-bit.
<Temporary Burn Folder> Windows The file system directory that is used as a staging area for files waiting to be written on a CD. Typical Path: C:\Documents and Settings\username\Local Settings\Application Data\Microsoft\CD Burning.
<Temporary Internet Folder> Windows The file system directory that serves as a common repository for temporary internet files. Typical path: C:\Documents and Settings\username\Local Settings\Temporary Internet Files.
<Windows> Windows The Windows directory or SYSROOT. This corresponds to the environment variables %windir% or %SYSTEMROOT%. Typical path: C:\Windows.
<Root> Mac OS X The Mac OS X root folder. We recommend that you do not specify policies for the root folder, even if it is technically possible.

Cloud Storage placeholders

Provider Cloud Storage placeholder Can be used in CSD (Cloud Storage Definition) setting Resolves to
Box <!Box!> Synchronization application, Synchronization folders For synchronization applications: The fully qualified path of the synchronization application used by the Box software.

For synchronization folders: The fully qualified path of the synchronization folder used by the Box software.

Dropbox <!Dropbox!> Synchronization application, Synchronization folders For synchronization applications: The fully qualified path of the synchronization application used by the Dropbox software.

For synchronization folders: The fully qualified path of the synchronization folder used by the Dropbox software.

Egnyte

Windows only

<!Egnyte!> Synchronization Application The fully qualified path of the synchronization application used by the Egnyte software.
<!EgnytePrivate!> Synchronization folders All private folders in the Egnyte cloud storage. For standard Egnyte users this is usually a single folder. For Egnyte administrators this placeholder typically resolves to multiple folders.
<!EgnyteShared!> Synchronization folders All shared folders in the Egnyte cloud storage.
Note:

Changes to the Egnyte folder structure (including adding or removing private and shared folders) are detected automatically. Relevant policies are updated automatically.

Note: As Egnyte synchronization folders may reside on network locations you can enter network paths in the Synchronization folders setting. The SafeGuard Enterprise Cloud Storage module therefore applies to network file systems by default. If this is not required, you can deactivate this behavior by defining a General Settings policy and selecting Network under Ignored Devices.
Google Drive <!GoogleDrive!> Synchronization application, Synchronization folders For synchronization applications: The fully qualified path of the synchronization application used by the Google Drive software.

For synchronization folders: The fully qualified path of the synchronization folder used by the Google Drive software.

OneDrive <!OneDrive!> Synchronization application, Synchronization folders For synchronization applications: The fully qualified path of the synchronization application used by the OneDrive software.

For synchronization folders: The fully qualified path of the synchronization folder used by the OneDrive software.

Note: SafeGuard Enterprise does not support Microsoft accounts. Under Windows 8.1, OneDrive can only be used if the Windows user is a domain user. Under Windows 8.1 SafeGuard Enterprise does not support OneDrive for local users.
OneDrive for Business <!OneDriveForBusiness!> Synchronization application, Synchronization folders For synchronization applications: The fully qualified path of the synchronization application used by the OneDrive software.

For synchronization folders: The fully qualified path of the synchronization folder used by the OneDrive software.

Note: OneDrive for Business only supports storing encrypted files in local folders and synchronizing them with the cloud. Storing encrypted files from Microsoft Office 2013 applications directly in the OneDrive for Business cloud or directly on the SharePoint Server is not supported. These files are stored unencrypted in the cloud.

SafeGuard Enterprise encrypted files in the OneDrive for Business cloud cannot be opened by Microsoft Office 365.

SkyDrive

Windows only

<!SkyDrive!> Synchronization application, Synchronization folders For synchronization applications: The fully qualified path of the synchronization application used by the OneDrive software.

For synchronization folders: The fully qualified path of the synchronization folder used by the OneDrive software.

Microsoft renamed SkyDrive to OneDrive, but the <!SkyDrive!> placeholder is still available to use.

This way older policies using the placeholder and SafeGuard Enterprise endpoints before version 7 which cannot handle the <!OneDrive!> placeholder can be used without any changes. SafeGuard Enterprise endpoints starting with version 7 can handle both placeholders.