Solved

how to set up efs in windows 2003 domain environment

Posted on 2006-11-20
6
2,566 Views
Last Modified: 2013-12-04
I need to set up efs in domain environment.

It would be great if you could tell me steps to configure efs in domain.
0
Comment
Question by:CMORAZA
6 Comments
 
LVL 33

Accepted Solution

by:
Busbar earned 63 total points
Comment Utility
0
 
LVL 38

Expert Comment

by:Rich Rumble
Comment Utility
I'd suggest using something other than EFS if you want an easy to manage solution that is secure by default. You must complete all these steps to even think that EFS might be secure: http://www.microsoft.com/technet/prodtechnol/winxppro/deploy/cryptfs.mspx#E5KAE
If you can remember to do all those things and train users to follow those instructions (decrypting/encrypting files in an encrypted folder only) then there is little hope of recovering EFS data.
TrueCrypt or PGP are secure out of the gate, and they don't decrypt files on the HD and create a plain-text version that can be recovered, they decrypt in memory, so if power is lost, there is no plain-text copy on the HD as there is with EFS.
make sure you back up all keys also if using EFS
http://support.microsoft.com/kb/241201
Get to know EFS as best you can if you really want to use it http://www.microsoft.com/technet/prodtechnol/windows2000serv/reskit/deploy/dgch_pki_rjxf.mspx?mfr=true
http://technet2.microsoft.com/WindowsServer/en/library/288af14d-66e3-4cee-bc3d-38795b046c251033.mspx?mfr=true
http://www.microsoft.com/technet/security/prodtech/windows2000/w2kccadm/dataprot/w2kadm21.mspx
-rich
0
 

Author Comment

by:CMORAZA
Comment Utility
Thank you for your help.

I am having difficulty to share encrypted files with the other user on a domain environment.

encrypted files are on a file server.
The file server is trusted for delegation.
the other user has permission to open encrypted files.

Any tips would be appreciated.
0
 
LVL 38

Assisted Solution

by:Rich Rumble
Rich Rumble earned 62 total points
Comment Utility
They need to be a DA, look here for adding users to the decryption agents: http://www.microsoft.com/windowsxp/using/security/expert/sharefilesefs.mspx
http://support.microsoft.com/kb/308991 If all that is in-line, try using efsinfo.exe to see if they are indeed allowed or not: efsinfo /u c:\path\to\file.txt   (or efsinfo /u \\server\sharename\file )
http://www.microsoft.com/technet/technetmag/issues/2006/05/HowITWorks/?topics=y

search tip for google, type site:site-example.com term you want to search for     like this:
http://www.google.com/search?hl=en&q=site%3Amicrosoft.com+efs+share+files&btnG=Google+Search

-rich
0
 
LVL 1

Expert Comment

by:Computer101
Comment Utility
Forced accept.

Computer101
EE Admin
0

Featured Post

Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

Join & Write a Comment

No security measures warrant 100% as a "silver bullet". The truth is we also cannot assume anything but a defensive and vigilance posture. Adopt no trust by default and reveal in assumption. Only assume anonymity or invisibility in the reverse. Safe…
Container Orchestration platforms empower organizations to scale their apps at an exceptional rate. This is the reason numerous innovation-driven companies are moving apps to an appropriated datacenter wide platform that empowers them to scale at a …
Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

8 Experts available now in Live!

Get 1:1 Help Now