Re: encrypting a directpry

From: David Cross [MS] (dcross_at_online.microsoft.com)
Date: 12/09/04 

Date: Thu, 9 Dec 2004 05:57:46 -0800

This whitepaper may be of additional help:
http://www.microsoft.com/technet/prodtechnol/winxppro/deploy/cryptfs.mspx 

-- 
David B. Cross [MS]
--
This posting is provided "AS IS" with no warranties, and confers no rights.
Top Whitepapers:
Auto-enrollment whitepaper: 
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/autoenro.mspx
Best Practices for implementing Windows Server 2003 PKI: 
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/ws3pkibp.mspx
Troubleshooting Certificate Status and Revocation whitepaper: 
http://www.microsoft.com/technet/security/topics/crypto/tshtcrl.mspx
Windows Server 2003 web enrollment and troubleshooting guide: 
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/webenroll.mspx
Windows Server 2003 web enrollment and troubleshooting guide: 
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/webenroll.mspx
"Roger Abell" <mvpNOSpam@asu.edu> wrote in message 
news:eySIWVf3EHA.2600@TK2MSFTNGP09.phx.gbl...
> With Windows XP Pro, and the Windows Server version (post NT 4)
> EFS encryption is built-in for use on any NTFS formatted storage.
> Directories are not actually encrypted, but may be marked so that
> any file placed within is encrypted.  An EFS encrypted file may be
> accessed by the account that encrypted, without really even noticing
> that there was a decryption,  The file will not be accessible by any
> other account - except in XP/W2k3 where one may, on a file by file
> basis, allow more than on user account.
> If EFS is the right solution for you, then search microsoft.com for
> EFS and do some reading, especially on recovery, before you do
> start using EFS as the only storage of your essential documents.
> This research should lead you to having an export of your EFS
> cert/key to external media - if you do not have that you are not
> ready for EFS prime-time.
> -- 
> Roger Abell
> Microsoft MVP (Windows  Security)
> MCSE (W2k3,W2k,Nt4)  MCDBA
> "Enno Lenze" <2004-12@spam.verbrennung.org> wrote in message
> news:31qfelF3dk7teU2@individual.net...
>> Hello!
>> I want to encrypt a driector with some programms. if i want to sue them,
>> i'll decrypt it for that time.
>>
>> Are there any tips for software which can handel that and is secure?
>>
>> regards, enno
>> -- 
>> http://www.verbrennung.org
>
>

Relevant Pages

  • Re: How do I encrypt a whole (external) USB harddisc (under Win200
    ... You still have to dumb down the default algorithm if you want Win2k interop, ... Best Practices for implementing Windows Server 2003 PKI: ... EFS is plenty good enough. ... be sure you back up your encryption keys and keep them in ...
    (microsoft.public.security)
  • RE: Protecting sensitive files on a Windows file server
    ... especially secure (using the file encryption is better though). ... Protecting sensitive files on a Windows file server ... recovery (which can also break EFS) and online password/data recovery ...
    (Security-Basics)
  • Re: EFS Private Keys
    ... It's possible to have a cluster that was in use that couldn't be wiped. ... > syskey was to EFS in W2K, ... >>> the private keys are protected however the key to the private key is ... >>> stronger encryption available for EFSfiles permanently if you don't. ...
    (microsoft.public.win2000.security)
  • Re: Corrupted Admin Profile
    ... > My view on EFS: ... > Do not to use encryption unless you are in a domain and you know ... as well not having created a Recovery Agent (with backup of the ... > Q241201 How to Back Up Your Encrypting File System Private Key ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Laptop Security - Microsoft EFS
    ... In the case of a laptop where the biggest concern is theft, ... As for EFS key theft, that wasn't the point I was trying to emphasize -- the ... crack the encryption, stick a sniffer in there AFTER it's decrypted. ... an additional point of attack -- one that may not make evident the ultimate ...
    (Security-Basics)
Quantcast