RE: File Ecncryption
- From: v-crinal@xxxxxxxxxxxxxxxxxxxx ("Crina Li")
- Date: Wed, 27 Sep 2006 10:17:56 GMT
Dear customer,
Thanks for your update.
Do you mean you want to know if you can let five different users to access
same encrypted files? As I know, you may need to set these accounts as
recovery agents.
Being the recovery agents means one will have the rights to decrypt any EFS
file. If this is a domain, you have two options
1. Recovery agents for whole domain
Read EFS file for whole domain
2. Recover Agents for specific workstation
Read EFS file on specific workstation.
Note: one will only have the ability to read the EFS file encrypted after
he is added to recovery agents
Related information:
887414 How to add an EFS recovery agent in Windows XP Professional
http://support.microsoft.com/default.aspx?scid=kb;EN-US;887414
259732 EFS Recovery Agent Cannot Export Private Keys
http://support.microsoft.com/default.aspx?scid=kb;EN-US;259732
241201 How to back up the recovery agent Encrypting File System (EFS)
private key in Windows Server 2003, in Windows 2000, and in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;EN-US;241201
Thanks for your time and I look forward to hearing from you.
Best regards,
Crina Li (MSFT)
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Thread-Topic: File Ecncryption
| thread-index: Acbhcoa/KiiKhAIvTamkycqDexEiXQ==
| X-WBNR-Posting-Host: 207.207.14.157
| From: =?Utf-8?B?QVRT?= <ATS@xxxxxxxxxxxxxxxxxxxxxxxxx>
| References: <27C078EE-AE39-4562-98B3-5B78847E3E13@xxxxxxxxxxxxx>
<$NyPW#R4GHA.3392@xxxxxxxxxxxxxxxxxxxxx>
| Subject: RE: File Ecncryption
| Date: Tue, 26 Sep 2006 06:49:02 -0700
| Lines: 106
| Message-ID: <37775257-4B65-4216-9D94-7F984E4B08F0@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
| Newsgroups: microsoft.public.windows.server.sbs
| Path: TK2MSFTNGXA01.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:300274
| NNTP-Posting-Host: TK2MSFTNGXA01.phx.gbl 10.40.2.250
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Crina,
|
| Thanks for the info. I have looked at two of those sites. I know how to
| encrypt a folder, but their is no way to add user certificates to the
folder.
| I know how to add user certificates to an encrypted file but that is
very
| labor intesive we have hundreds of files to encrypt. What I need is
| something that will allow five different users to be able to gain access
to
| the same encrypted files. Not sure if Windows will allow me to that?
|
| ATS
|
| ""Crina Li"" wrote:
|
| > Dear customer,
| >
| > Thank you for posting in SBS newsgroup.
| >
| > As I know, you can refer to the "How to encrypt a file for multiple
users"
| > and "Encrypting a folder" section of the following KB article:
| >
| > 223316 Best Practices for the Encrypting File System
| > http://support.microsoft.com/?id=223316
| >
| > The following are good information on EFS:
| >
| > The Windows Server 2003 Family Encrypting File System
| >
http://www.msdn.microsoft.com/library/default.asp?url=/library/en-us/dnsecur
| > e/html/WinNETSrvr-EncryptedFileSystem.asp
| >
| > Encrypting File System in Windows XP and Windows Server 2003
| >
http://www.microsoft.com/technet/prodtechnol/winxppro/deploy/cryptfs.mspx#XS
| > LTsection127121120120
| >
| > I appreciate your time and look forward to hearing from you.
| >
| > Best regards,
| >
| > Crina Li (MSFT)
| >
| > Microsoft CSS Online Newsgroup Support
| >
| > Get Secure! - www.microsoft.com/security
| >
| > =====================================================
| > This newsgroup only focuses on SBS technical issues. If you have issues
| > regarding other Microsoft products, you'd better post in the
corresponding
| > newsgroups so that they can be resolved in an efficient and timely
manner.
| > You can locate the newsgroup here:
| > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| >
| > When opening a new thread via the web interface, we recommend you check
the
| > "Notify me of replies" box to receive e-mail notifications when there
are
| > any updates in your thread. When responding to posts via your
newsreader,
| > please "Reply to Group" so that others may learn and benefit from your
| > issue.
| >
| > Microsoft engineers can only focus on one issue per thread. Although we
| > provide other information for your reference, we recommend you post
| > different incidents in different threads to keep the thread clean. In
doing
| > so, it will ensure your issues are resolved in a timely manner.
| >
| > For urgent issues, you may want to contact Microsoft CSS directly.
Please
| > check http://support.microsoft.com for regional support phone numbers.
| >
| > Any input or comments in this thread are highly appreciated.
| >
| > =====================================================
| >
| > This posting is provided "AS IS" with no warranties, and confers no
rights.
| > --------------------
| > | Thread-Topic: File Ecncryption
| > | thread-index: AcbgOreYb79RpyijTFOExwpd+xhoNg==
| > | X-WBNR-Posting-Host: 66.82.9.87
| > | From: =?Utf-8?B?QVRT?= <ATS@xxxxxxxxxxxxxxxxxxxxxxxxx>
| > | Subject: File Ecncryption
| > | Date: Sun, 24 Sep 2006 17:37:01 -0700
| > | Lines: 7
| > | Message-ID: <27C078EE-AE39-4562-98B3-5B78847E3E13@xxxxxxxxxxxxx>
| > | MIME-Version: 1.0
| > | Content-Type: text/plain;
| > | charset="Utf-8"
| > | Content-Transfer-Encoding: 7bit
| > | X-Newsreader: Microsoft CDO for Windows 2000
| > | Content-Class: urn:content-classes:message
| > | Importance: normal
| > | Priority: normal
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
| > | Newsgroups: microsoft.public.windows.server.sbs
| > | Path: TK2MSFTNGXA01.phx.gbl
| > | Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:299893
| > | NNTP-Posting-Host: TK2MSFTNGXA01.phx.gbl 10.40.2.250
| > | X-Tomcat-NG: microsoft.public.windows.server.sbs
| > |
| > | I am trying to encrypt files. I am able to use EFS. My problem is I
| > need
| > | five people to have access to these files. With EFS I can add their
| > | certificates manually but that is not doable because we are talking
about
| > | hundres of files. Is there any way of having all five in a group and
| > then
| > | using that certificate for EFS, or do I need a third party software?
If
| > I do
| > | need a third party software what would you suggest?
| > | Thanks
| > |
| >
| >
|
.
- References:
- RE: File Ecncryption
- From: "Crina Li"
- RE: File Ecncryption
- From: ATS
- RE: File Ecncryption
- Prev by Date: Re: VPN Issues
- Next by Date: Re: Security warning zone?
- Previous by thread: RE: File Ecncryption
- Next by thread: Re: Second domain controller running a second Exchange server with SBS
- Index(es):
Relevant Pages
|
