EFS

[Guest]

Archived from groups: microsoft.public.win2000.file_system (More info?)

I'm the administrator of a W2K-file server. I'm not domain admin. For a
specific group of users I have to implement EFS for their homedrives as well
as for a shared group drive. The files and folders already exist and are
accessed through mapped drives from the XP-workstations. Is it possible to
implement EFS and how do I do it? What has to be done on the server? How can
I implement it without annoying my users? I must be able to recover files if
any emergencies occur.
Is it possible to implement it on the fileserver alone or do I have to
involve the domain controller for the certificate part? Thanks for your
help.

 

[Guest]

Archived from groups: microsoft.public.win2000.file_system (More info?)

A domain administrator would need to make the server "trusted for
delegation" in the AD.

Here's a doc for XP/2003:
http://www.microsoft.com/technet/prodtechnol/winxppro/deploy/cryptfs.mspx

Windows 2000 is largely the same, although it doesn't have the UI to add
users to files and can only do full delegation (not constrained delegation).
--
Drew Cooper [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.


"Andre I" <aragorn@tiscali.ch> wrote in message
news:O59r9ezPEHA.2132@TK2MSFTNGP11.phx.gbl...
> I'm the administrator of a W2K-file server. I'm not domain admin. For a
> specific group of users I have to implement EFS for their homedrives as
well
> as for a shared group drive. The files and folders already exist and are
> accessed through mapped drives from the XP-workstations. Is it possible to
> implement EFS and how do I do it? What has to be done on the server? How
can
> I implement it without annoying my users? I must be able to recover files
if
> any emergencies occur.
> Is it possible to implement it on the fileserver alone or do I have to
> involve the domain controller for the certificate part? Thanks for your
> help.
>
>