Re: MS EFS Question

From: mike.borkin@gm.com
Date: 01/11/02 

From: mike.borkin@gm.com
To: "leon" <leon@inyc.com>
Date: Fri, 11 Jan 2002 16:02:43 -0500

From
http://www.microsoft.com/technet/prodtechnol/windows2000serv/deploy/confeat/efsguide.asp

Copying an Encrypted Folder or File

The following explains the procedures and limitations for copying encrypted
folders or files on the same volume and from one volume to another.

To copy a file or folder on the same computer from one NTFS partition in a
Windows 2000 location to another NTFS partition in a Windows 2000 location. Copy
 the file or folder as you would an unencrypted file. Use Windows Explorer or
the command prompt. The copy is encrypted.
To copy a file or folder on the same computer from an NTFS partition in a
Windows 2000 volume to a FAT partition. Copy the file or folder as you would an
unencrypted file. Use Windows Explorer or the command prompt. Because the
destination file system does not support encryption, the copy is in clear text.
To copy a file or folder to a different computer where both use the NTFS
partitions in Windows 2000. Copy the file or folder as you would an unencrypted
file. Use Windows Explorer or the command prompt. If the remote computer allows
you to encrypt files, the copy is encrypted; otherwise it is in clear text. Note
 that the remote computer must be trusted for delegation; in a domain
environment, remote encryption is not enabled by default.
To copy a file or folder to a different computer from an NTFS partition in a
Windows 2000 location to a FAT or NTFS in a Windows NTŪ 4.0 location. Copy the
file or folder as you would an unencrypted file. Use Windows Explorer or the
command prompt. Because the destination file system does not support encryption,
 the copy is in clear text.
Note If your original file was encrypted, Microsoft recommends that you use the
File Properties, Advanced option to confirm the status of the destination file.

Moving or Renaming an Encrypted Folder or File

The following explains the procedures and limitations for moving encrypted
folders or files on the same volume and from one volume to another.

To move or rename a file or folder within the same volume. Move the file as you
would an unencrypted file. Use Windows Explorer, the context menu, or the
command prompt. The destination file or folder remains encrypted.
To move a file or folder between volumes. This is essentially a copy operation.
Review the previous section, Copying an Encrypted Folder or File.

"leon" <leon@inyc.com> on 01/09/2002 10:59:38 PM

To: security-basics@security-focus.com
cc: (bcc: Mike Borkin/US/GM/GMC)
Subject: MS EFS Question

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi everyone,

Quick (and perhaps easy?) question for the MS folks.

If you have a file on an NTFS volume that is encrypted (with EFS) and
you transfer it to a fat32 partition what happens? What happens if
you copy the EFS file from one NTFS volume to another? I am going to
guess that in the 1st case it decrypts the file (not sure). I am
pretty sure that in the 2nd case it retains the encryption. Can
anyone quickly verify? I don't have a fat32 partition to test on.
In the meantime I will try out the 2nd scenario and you are welcome
to mail me off-list if you are curious (unless someone answers it on
list).

Thanks guys (and ladies of course).

Cheers,

Leon

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com>

iQA/AwUBPD0RqtqAgf0xoaEuEQJiZwCgw7TNQs9wVbIZdxAdSZGR8J6D3IoAoNZz
SUCaNmqheFn+HZIPhSYY+Btp
=Ptbl
-----END PGP SIGNATURE-----

Relevant Pages

  • Re: Help Help Help Please !
    ... Take Ownership of a File or Folder in Windows XP ... not have permissions for if you are an administrator for that computer. ... Change the Folder Encryption Atribute. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Cached Domain Password on Notebook, secure?
    ... "Backing Up an Encrypted Folder or File ... Backup created using the Copy command or menu ... or any backup utility that supports Windows 2000 features. ... the file encryption, and the backup operator does not need access to private ...
    (Focus-Microsoft)
  • Re: password protecting folders - is it possible???
    ... I can't comment on Windows XP Home due to lack of experience with it but in ... general with ntfs you restrict access by assigning permissions to ... set encryption in the folder or file properties in the advanced section. ...
    (microsoft.public.security)
  • Re: password
    ... If you used XP's encryption, ... If you only had a password for your Windows username, ... Taking Ownership: ... Sometimes, in order to get access to a folder, you need to "take ownership" ...
    (microsoft.public.windowsxp.hardware)
  • Re: cannot access encrypted file, changing security ownership did
    ... Reading the remove encryption and backing up keys doesn't make sense ... How do I get these rotten keys and how do I use them if I should need them, ... I was worried that some hacker would get into my folder, ... norton security 2006 will not let me clean out my cookie ...
    (microsoft.public.windowsxp.security_admin)