Re: Encrypt profile directory

You should not encrypt the whole user profile because the user's private key
is stored in the user profile in the application data\Microsoft\crypto
folder. I am surprised you did not have any problems. Generally encrypting
the user's my documents folders will suffice and also the local settings
folder or appropriate subfolder if you need to encrypt emails.

Steve



"Tony Skalski" <ajsNOSPAM@xxxxxxxxxx> wrote in message
news:%23NoOoNWxGHA.4968@xxxxxxxxxxxxxxxxxxxxxxx
Greetings,

I have EFS ready to roll-out to a few laptops (with proper backups and
DRAs) and am wondering how safe is it to encrypt the user's entire profile
directory? I have been testing it here and it *seems* to work...

ajs


.

Relevant Pages

  • Re: user does not have acces privileges
    ... Well what happens is when you encrypt a file with EFS a certificate and ... private key is created for you and stored in your user profile. ... reinstalled XP if you formatted your system drive then your EFS ...
    (microsoft.public.windowsxp.security_admin)
  • Re: using efs
    ... EFS does not support encryption of the user profile. ... > I would like to use win2k's built-in file encryption efs to encrypt the my ... > documents folder on my laptop. ...
    (microsoft.public.win2000.security)
  • Re: Security of Windows XP for remote users
    ... You need 3rd party software to encrypt the whole hard drive. ... With the built in encryption, EFS, the key to decrypt is stored in the user profile. ... Do I have to do it folder by folder? ... > the flight company simply lose them. ...
    (microsoft.public.windowsxp.general)
  • Re: Encrypting locked files with EFS (WinXP)
    ... export/delete your user private key for EFS [and recovery agent if their is ... That is the only way to protect the EFS files from attack - ... I can't encrypt the folders ... > I think that I have to encrypt the SystemCertificates folder because ...
    (microsoft.public.win2000.security)
  • Re: EFS for the entire user profile
    ... It is not possible because the user profile contains the EFS private key in ... folders that have data that you want to secure such as my documents folder. ... Is is possible/advisable to encrypt the entire user profile for a logged ...
    (microsoft.public.win2000.security)