How to disable EFS on SBS 2008

Posted on 2012-09-09
Medium Priority
Last Modified: 2012-09-10

Getting a few users that keep storing encrypted files on the server somehow. It's a real pain because there are issues with backing up, roaming profile syncs etc...

From what I can see, the only way to fix this is to log in as the user and decrypt the file. I'm trying to do a file copy at the moment and it's stopping me. Is there a way that I can disable the ability to store EFS files on server shares?

Question by:Talds_Alouds
LVL 78

Accepted Solution

Rob Williams earned 2000 total points
ID: 38381868
You should be able to use Group policy to disable the user right to use EFS: Set to disabled, the following policy "Allow users to encrypt files using Encrypting File System (EFS)"

To locate open group policy management console | Default Domain Policy |Computer Configuration | Policies | Windows Settings | Security Setting | Public Key Policies | Right-click Encrypting File System and select Properties |  Select "don't allow"

Author Closing Comment

ID: 38382253
Perfect! Thanks

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Because virtualization becomes more and more common, and, with Microsoft Hyper-V included in Windows Server at no additional costs, and, most server hardware nowadays is more than capable of running a physical Small Business Server (SBS) 2008 or 201…
Exchange database can often fail to mount thereby halting the work of all users connected to it. Finding out why database isn’t mounting is crucial and getting the server back online. Stellar Phoenix Mailbox Exchange Recovery is a champion product t…
The video provides a quick and easy steps to migrate MBOX file to well known Outlook PST and Office 365. Besides this, it also supports and migrates more than 20 email clients of MBOX which include AppleMail, Opera, Thunderbird and SeaMonkey effortl…
Did you know PowerShell can save you time with SaaS platforms? Simply leverage RESTfulAPIs to build your own PowerShell modules. These will kill repetitive tickets and tabs, using the command Invoke-RestMethod. Tune into this webinar to learn how…

587 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question