Re: How to Copy EFS(encrypted) Files....

In article <8B7C23DD-9C7B-4C41-8510-D246FE43DD21@xxxxxxxxxxxxx>, in the
microsoft.public.security news group, =?Utf-8?B?RGF2aWQgRGF2aXM=?=
<DavidDavis@xxxxxxxxxxxxxxxxxxxxxxxxx> says...

> WebDav simply provides a means by which you can secure the transmission via
> SSL.
>

This actually is not true. The benefit of using WebDAV to transfer EFS
encrypted files to a remote server is that the files are copied in their
RAW, fully encrypted format. This is why when you use WebDAV you won't
see a profile created on the remote system for the user doing the
copying and is also why the WebDAV server doesn't need to be trusted for
delegation. The main problem with using WebDAV is that unless you're
using roaming user profiles or DIMS, the user will only be able to
decrypt files on the WebDAV server from the computer that they
originally copied the files from. That will be the only computer that
has the user's certificate and key pair on it.

This behaviour will change with Vista and Longhorn. With that
combination you will not need WebDAV. All encryption and decryption will
occur on the client side even when using CIFS shares.

--
Paul Adare
MVP - Windows - Virtual Machine
http://www.identit.ca/blogs/paul/
Ca·nadi·an (k-nd-n) adj. & n.
n: An educated, unarmed American with health care.
.

Relevant Pages