Re: Sharing EFS Encrypted Files for Mobile Clients

From: David Cross [MS] (vaq130@hotmail.com)
Date: 08/11/02


From: "David Cross [MS]" <vaq130@hotmail.com>
Date: Sat, 10 Aug 2002 16:22:17 -0700


You pretty much have described the options unless you write a custom client
for EFS management.

--
David B. Cross [MS]
--
This posting is provided "AS IS" with no warranties, and confers no rights.
http://support.microsoft.com
"Luke Petersen" <luke.petersen@invocom.com> wrote in message
news:01c801c23f72$449e1e70$3aef2ecf@TKMSFTNGXA09...
> I am trying to determine the best way to enable a mobile
> user (not connected to AD) to encrypt a file using EFS and
> allow it to be shared to another user.  If the shared user
> certificate is added to the Other People group then
> failure to access the CRL will cause the encryption to
> fail.  If I put the shared user certificate in the Trusted
> People group then I will need to manually maintain this
> group of certificates on each client.  Our user group is
> small so the latter would be OK for new but it isn't
> scalable - what are the options?