Protect the local copy without overstating control
A PC-side folder boundary can reduce casual local access to supported sync folders, but it does not change Dropbox permissions or encrypt data on the provider. Test the exact supported client, folder path, Windows profile and lock state.
An event planner prepares a fictional vendor-contract package on an approved Windows production laptop, tests the relevant layer and keeps the working source separate.
Run the control sequence
- 01
Confirm the supported Dropbox desktop client and current Windows environment.
- 02
Pilot the local boundary with fictional contracts.
- 03
Test open, close, sign-out, restart and sync behavior.
- 04
Check plaintext downloads, previews, recent-file lists and temp folders separately.
- 05
Document what remains visible to administrators, backups and the provider.
Preserve decision evidence
Record client and product version, Windows profile, protected path, lock tests, restart result, residue, exceptions and owner.
Stop when
- The test assumes provider-side encryption.
- The folder moves or stops syncing unexpectedly.
- A local administrator or alternate path has not been considered.
Keep secrets and unnecessary vendor data out of the decision record.
Separate local and provider controls
PC-side folder access is not provider-side encryption, Dropbox account recovery, sharing-link control, MFA, permission bypass, guaranteed backup or full-device security.
Local sync questions
Does local folder access control the Dropbox account?
No. Dropbox permissions, links, MFA, sessions and recovery remain provider controls.
Is sync an independent backup?
No. Test a separately stored recovery copy outside the same account and device failure domain.
Primary references
References support specific boundaries and do not imply endorsement.