EFS Pilot

I'm trying to configure a EFS pilot on our domain. We are running Windows
2003 servers and Windows XP Clients.

I'm trying to configure EFS to use a Certificate Authority to allow multiple
users to have access to a single encrypted file.

I want to do this without using auto-enrollment, and have it only affect
several pilot users.

My problem is when I encrypt a file, and try to add other people's
certificates to the file, I receive an error box stating: "No appropriate
certificates correspond to the selected user."

I've logged in as the user I'm trying to add to the encrypted file, and
browsed to the /certsrv website and registered for both a user certificate
and a EFS certificate, but it still will not allow me to add the user.

Any ideas what I'm doing wrong?

thx
--
Steve


.

Relevant Pages

  • Re: EFS/DRA
    ... Associated with the user is a Cert Thumbprint. ... Does it state that you have the private key associated with the certificate? ... > test the data recovery agent before implementing EFS on my network. ... It is not a transfer of the encrypted file to your machine. ...
    (microsoft.public.security)
  • Re: Getting rid of my Certification Authority
    ... revoked my new certificate. ... have you checked to see if any EFS ... won't be able to share the encrypted file with that user. ... your EFS certificate you will be able to use it to encrypt new content as ...
    (microsoft.public.security)
  • About EFS and local certificate that I want to export in SBS
    ... I have two computers XP_A and XP_B member of an active directory domain with no certificate authority. ... Isabelle logs on XP_B and encrypts a file with EFS, then she adds the Pascal certificate to authorize him to access this encrypted file. ... With a certificate authority, I think there will be no problem but I would like to understand why like this it is not working. ...
    (microsoft.public.windows.server.sbs)
  • About EFS and local certificate that I want to export
    ... I have two computers XP_A and XP_B member of an active directory domain with no certificate authority. ... Isabelle logs on XP_B and encrypts a file with EFS, then she adds the Pascal certificate to authorize him to access this encrypted file. ... With a certificate authority, I think there will be no problem but I would like to understand why like this it is not working. ...
    (microsoft.public.windows.server.security)
  • About EFS and local certificate that I want to export
    ... I have two computers XP_A and XP_B member of an active directory domain with no certificate authority. ... Isabelle logs on XP_B and encrypts a file with EFS, then she adds the Pascal certificate to authorize him to access this encrypted file. ... With a certificate authority, I think there will be no problem but I would like to understand why like this it is not working. ...
    (microsoft.public.windows.server.general)