[Explaining-4] Encrypting File System EFS

First, only the NTFS disk files, folders can be encrypted, if the file is copied to a non-NTFS disk, this file will be decrypted, in addition: file compression and encryption cannot coexist

EFS Encrypted folder

Properties-Advanced-encrypt content to protect data

So what's the next thing you need to see?

650) this.width=650; "height=" 481 "title=" clip_image002 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image002 "src=" http://s3.51cto.com/wyfs02/ M00/6c/6b/wkiol1vjdpfjyynpaahsz9kf3bc460.jpg "border=" 0 "/>

EFS Encrypted files

Encrypt files on DC7, different options have different differences

650) this.width=650; "height=" 346 "title=" clip_image004 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image004 "src=" http://s3.51cto.com/wyfs02/ M01/6c/6b/wkiol1vjdpjjikgnaaex3eprfec633.jpg "border=" 0 "/>

Encryption and decryption process is automatic, when you move an unencrypted file or copy to an encrypted folder, the file will be automatically encrypted, when you move an encrypted file or copied to a non-encrypted folder, the file will remain encrypted state

EFS test

Encrypting files with Administrator account on DC7 EFS, options: Apply changes to this folder, sub-files and files

650) this.width=650; "height=" 133 "title=" clip_image006 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image006 "src=" http://s3.51cto.com/wyfs02/ M02/6c/6b/wkiol1vjdpnbbgy-aach3azlppk184.jpg "border=" 0 "/>

Results The following error occurred in Bob,alice access

650) this.width=650; "height=" 172 "title=" clip_image008 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image008 "src=" http://s3.51cto.com/wyfs02/ M00/6c/6b/wkiol1vjdprwjrlxaaa3el0aoy8298.jpg "border=" 0 "/>

EFS Licensing

Of course you can also authorize other users on each file

( Note : The user must have an EFS certificate to be authorized, so when we perform an EFS encryption operation with Alice's account, he will automatically be given the EFS certificate.)

For example, we authorize in the selected document:

Properties-Advanced-Details-add-Find users-Choose Alice

650) this.width=650; "height=" 335 "title=" clip_image010 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image010 "src=" http://s3.51cto.com/wyfs02/ M01/6c/6b/wkiol1vjdpvseentaacaefhkzoo697.jpg "border=" 0 "/>
650) this.width=650; "height=" 285 "title=" clip_image012 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image012 "src=" http://s3.51cto.com/wyfs02/ M02/6c/6b/wkiol1vjdpvxry_baaceljw0s1u084.jpg "border=" 0 "/>

650) this.width=650; "height=" "title=" clip_image014 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image014 "src=" http://s3.51cto.com/wyfs02/ M02/6c/6f/wkiom1vjdsvspbkzaabvoaellz4567.jpg "border=" 0 "/>650) this.width=650;" height= "title=" Clip_ " image016 "style=" Margin:0px;border:0px;padding-top:0px;padding-right:0px;padding-left:0px;background-image:none ; "alt=" clip_image016 "src=" http://s3.51cto.com/wyfs02/M00/6C/6B/wKioL1VJdp2Sms4-AABjqO1Kyhg034.jpg "border=" 0 "/ >

The result of the experiment was that Alice could access Esf2.txt and Bob's users could not.

Backing Up EFS certificates

650) this.width=650; "height=" 187 "title=" clip_image018 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image018 "src=" http://s3.51cto.com/wyfs02/ M01/6c/6b/wkiol1vjdp6ckymnaabmizz8m9k091.jpg "border=" 0 "/>

certmgr.msc– Select the certificate to Export-Properties-Export-Select Yes, export the private key, enter the password, and put it in a safe place

650) this.width=650; "height=" 319 "title=" clip_image020 "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none, "alt=" clip_image020 "src=" http://s3.51cto.com/wyfs02/ M02/6c/6b/wkiol1vjdp6yvc9haabncgqh8vk830.jpg "border=" 0 "/>

650) this.width=650; "height=" 385 "title=" clip_image022 "style=" border:0px;padding-top:0px;padding-right:0px; Padding-left:0px;background-image:none, "alt=" clip_image022 "src=" http://s3.51cto.com/wyfs02/M00/6C/6B/ Wkiol1vjdp_rfqceaab2dhcfqvs373.jpg "border=" 0 "/>

This article from the "Erick" blog, declined to reprint!

[Explaining-4] Encrypting File System EFS