Re: How to disable the EFS when copy the files to share directory?

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 04/28/05 

Date: Thu, 28 Apr 2005 13:32:14 -0500

If you are in a domain, you can disable EFS on "computers" using Group
Policy as shown in the first link below. You could create an Organizational
Unit, create the Group Policy for that OU and then move the computer into
the OU. That may not automatically decrypt them but you should receive a
message that file will not be encrypted. Also a computer account must be
trusted for delegation in Active Directory in order to allow EFS files over
the network. However do not disable delegation on a domain controller. ---
Steve

http://www.petri.co.il/disable_efs_in_windows_xp_2003.htm
http://www.microsoft.com/resources/documentation/Windows/XP/all/reskit/en-us/Default.asp?url=/resources/documentation/Windows/XP/all/reskit/en-us/prnb_efs_dgwp.asp

"Rex" <Rex@Home> wrote in message
news:%23%23wPyDATFHA.140@TK2MSFTNGP10.phx.gbl...
> Dear Expert,
>
> I want to setup an EFS in Windows XP local. When I copy the files from
> encrypted folder to the server share folder. The files will be
> encrypted.as
> a result, the other people cannot open it.
> Is it possible to make the file decrypted automatically when I copy the
> files to server share folder ?
> Server version is Windows 2003 with NTFS.
>
> Thanks a lot.
>
>

Relevant Pages

  • Re: default domain policy + EFS
    ... I would like to disable EFS across the domain and only allow specific user ... For that purpose I have created a policy ... defining the recovery agents - these are the same agents that already exist ...
    (microsoft.public.security)
  • Re: EFS files without recovery agent
    ... Someone before me has configured EFS policy in "Default Domain GPO". ... "EFS GPO" where I created Recovery agent with proper certificate. ...
    (microsoft.public.security)
  • Re: Using EFS for laptops in a domain
    ... to avoid EFS on the server except for some very specialized uses. ... but then I couldn't set or clear the encryption ... I'll give the folder disabling ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Folder Redirection Data Encryption
    ... >First the remote server must be trusted for delegation ... >certificate/private key or import your existing one into ... >encrypt a file on it creating a EFS certificate/private ...
    (microsoft.public.win2000.networking)
  • Re: Recovery Agent configured in GPO, but cannot see it in Encrypt
    ... On the computer where you created the EFS files that do not show a RA try ... Policy that has the RAs configured which should be all computers if done at ... because of domain Group Policy configuration you may have a problem with DNS ...
    (microsoft.public.windowsxp.security_admin)