How can I check to see if a file is encrypted with EFS or not?
When you try to access a file on an NTFS file system volume, you may receive an “access is denied” error message. The file’s NTFS permissions indicate that you can access the file. Sometimes this means that the file is encrypted with EFS.
To determine if a file has been encrypted:
You can also use the CIPHER command from a CMD window:
Run the CIPHER command without any parameters to display the encryption status of files and folders.
A U means that the file/folder is un-encrypted. An E means that it is encrypted.
You might also want to read the following related articles: