Re: EFS and trojan horses

From: Andrew Mitchell (amitchel_at_removecasey.vic.gov.au)
Date: 03/16/04


Date: Tue, 16 Mar 2004 05:39:01 -0800


=?Utf-8?B?Tmljb2xl?= <anonymous@discussions.microsoft.com> said

> Hi all,
>
> I'm an EFS newby. My question is: does EFS protect my data also from
> malicious access through trojan horses?
>

Not necessarily.
EFS encrypts files using certificates. If you encrypt a file then attempt
to access it you will be allowed as you have the correct certificate.
If another user attempts to access the file they will be denied (unless you
have allowed their cerificate to have access)

Any application that you run, runs as if it were you which means that it
has whatever access you have. If you run a trojan it has the same access to
files that you have.

Andy