Re: Encryption



Many thanks Brian

I will read up on the white paper.

Richard

"Brian Komar" <bkomarr@xxxxxxxxxxxxxxxxx> wrote in message
news:xjww014pvbo7.1ltsrljjf79co$.dlg@xxxxxxxxxxxxx
On Tue, 8 May 2007 13:06:02 +0800, Richard wrote:

Hi

I am having some difficulties with efs. I am still working on the issue
(previous thread with same title).

I am now trying an ecrypted file within the same domain. I encrypted a
file
'encrypttest.txt' on A and copied it to a shared directory. I went to
another computer B, tried to open it, access denied.

Then I exported the cert/key from 'A' to the shared directory and
installed
it to 'B'. Tried to open the file but couldn't open it.

What could I be doing wrong?

Any help appreciated. Many thanks in advance.

Richard

The problem is that you are you do not understand how EFS works when you
encrypt files on a server. I recommend that you read the whitepaper on EFS
available at:
http://www.microsoft.com/technet/prodtechnol/winxppro/deploy/cryptfs.mspx

Check out the section titled: "File Sharing on Remote Servers"

The basic issue is that you are working with the certificates at the
clients when the certificates being used are at the server.

Brian


.



Relevant Pages

  • Re: Using EFS for laptops in a domain
    ... to avoid EFS on the server except for some very specialized uses. ... but then I couldn't set or clear the encryption ... I'll give the folder disabling ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Folder Redirection Data Encryption
    ... >First the remote server must be trusted for delegation ... >certificate/private key or import your existing one into ... >encrypt a file on it creating a EFS certificate/private ...
    (microsoft.public.win2000.networking)
  • Re: Folder Redirection Data Encryption
    ... user profile on that server and either encrypt a file there to generate a encryption ... encrypt a file on it creating a EFS certificate/private key in that profile. ...
    (microsoft.public.win2000.networking)
  • Re: EFS mixed clients and shared folders
    ... One thing to check is that the server is trusted for delegation in it's ... the server with the share that will contain the users certificate and EFS ... EFS certificates that exist for a user or RA on a computer. ... > FolderA is shared as FolderA with Domain Admins having Full Control both ...
    (microsoft.public.win2000.security)
  • Re: Serious EFS Issue
    ... user's information it copied her Documents and Settings to the 2003 server. ... I am also using folder redirection with her My Documents folder, ... where I am having issues with her data encryption. ... > for use with EFS (use the account to look in the Certificates ...
    (microsoft.public.windows.server.security)