encrypting file system

EFS protects data from being read, not deleted. Because attempts to copy an EFS-encrypted file fail, many assume that an unauthorized user cannot delete the file either; however, it can be deleted.
EFS protects data stored on a local NTFS partition. It does not protect data when it is sent across a network. This is a […]

The problems with EFS can be greatly compounded if you are not looking for it as a possible culprit. When a user tries to access a file that has been encrypted by someone else, depending on the type of access attempted or the application being used, the user will generally get one of two messages: […]

Vista includes two encryption technologies: Encrypting File System (EFS) and BitLocker Drive Encryption. As with most technology, once you implement either encryption technology, you might encounter some common problems. In this series of articles, we will take a look at some of the common issues that can arise with both technologies.
If you cannot enable BitLocker […]

In the Part II of this series, you learned how to encrypt files in Vista and verify that users are unable to open the encrypted files. An important point to keep in mind is that although the user is unable to open the file, they can delete the file. You might be confused as to […]

Getting started with a basic EFS setup is as easy as a few mouse clicks for a simple configuration. For these steps, I will assume that you’re using roaming profiles to avoid the certificate confusion. From the client, browse to the file that you would like to encrypt. Right-click it and choose Properties from the […]

Vista includes two encryption technologies: Encrypting File System (EFS) and BitLocker Drive Encryption. In this series of articles, you will learn how to set up both technologies in Vista.
To use BitLocker Drive Encryption (assuming you are not using hardware cryptography) you need to first configure the local computer policy to allow you to use USB […]

In Part I of this series, you learned about some of the things to consider before implementing EFS. BitLocker Drive Encryption has some very specific requirements so lets take a look at some of the things to consider before implementing it on a computer.
BitLocker requires local or Active Directory Group Policy modification to enable. It […]

Vista includes two encryption technologies: Encrypting File System (EFS) and BitLocker Drive Encryption. Some prior planning is required to implement either technology effectively.
EFS is designed so that it’s not necessary to have a Certificate Authority (CA) on the network to use file encryption. If there’s no CA, the EFS component will issue a self signed […]

EFS is primarily intended to protect the file system on a computer that is not physically secure. For example, a server kept behind locked doors that has no removable storage devices is not a likely candidate for EFS, as someone would have to break into your server room, remove the drive(s), and get out without […]

Setting proper permissions is a good place to start when securing your Vista workstation, but you can go one-step further by encrypting files on your workstation. Encryption provides another layer of protection for information that must be kept private. Vista includes two encryption technologies, Encrypting File System (EFS) and the new Bitlocker, that when used […]