IT-Expert on Call

Experience has no substitute
Inexperience carries significant cost and risk
Use System Restore | Total Uninstall | Sync Your Outlook Folders | Prevent Data Loss | Kill spam
- - -
-
Information Technology for Home & Business Close Window

How to Share Files Using Encrypting File System (EFS)?

The Windows XP Encrypting File System allows you to secure your files against people who want to steal the information contained within them (or just view them without authorization). EFS was first introduced with Windows 2000. The problem with the Windows 2000 EFS was that only the person who encrypted the file could read it. Microsoft improved EFS in Windows XP Pro so that you can allow other users access to your encrypted files. If your computer belongs to an Active Directory domain, here's how you do it:

  1. Right click the Start button and click Explore to open the Windows Explorer. Go to the appropriate directory and select the file you want to encrypt.
  2. Right-click the file and click the Properties command.
  3. Click the General tab and then click the Advanced button.
  4. Put a checkmark in the Encrypt contents to secure data checkbox, then click OK. Click the Apply button in the file's Properties dialog box. If this is the first time a file or folder has been encrypted, a dialog box will appear asking if you would like to encrypt the file only or the folder. Select Encrypt the file only and put a checkmark in the Always encrypt only the file checkbox. You will still be able to encrypt a folder if that's what you want to do. Then click OK.
  5. Right click the file again and click the Properties command. Click the General tab and then click the Advanced button.
  6. In the Advanced Attributes dialog box, click the Details button.
  7. Click the Add button in the Encryption Details dialog box.
  8. A Select User dialog box appears, showing existing users and certificates that are cached in the "Other People" certificate store of the local machine. It allows new users to be added from the Active Directory by clicking the Find User button. A user must have a valid EFS certificate in the Active Directory to be added.
  9. Click the Find User button. Type the name of the user in the Enter the object name to select text box, then click OK.
  10. Click OK in the Encryption Details dialog box, then click OK in the Advanced Attributes dialog box.
  11. Click Apply and then click OK in the file's Properties dialog box.

Now the user(s) you added will be able to access your encrypted files, as long as they also have the appropriate permissions (EFS sharing is a separate issue from access permissions). Also note that you can't use EFS on XP Home Edition machines.

Close Window
-
- - -

IT-Expert on Call Professionals are ready willing and able to expertly deploy it for you


Updated Sun 08/15/2004 8:41 AM
Webmaster: David Mozer