MCSE : Security Specialist
Given a scenario, predict the effects of a particular security
implementation on network performance.
Encryption
Windows 2000
The
Encrypting File System (EFS) provides the core file encryption
technology used to store encrypted files on NTFS file system
volumes. Once you encrypt a file or folder, you work with the
encrypted file or folder just as you do with any other files and
folders. Encryption is transparent to the user that encrypted the
file. This means that you do not have to decrypt the encrypted file
before you can use it. You can open and change the file as you
normally do. However, an intruder who tries to access your encrypted
files or folders will be prevented from doing so. An intruder
receives an access denied message if the intruder tries to open,
copy, move, or rename your encrypted file or folder.
You
encrypt or decrypt a folder or file by setting the encryption
property for folders and files just as you set any other attribute
such as read-only, compressed, or hidden. If you encrypt a folder,
all files and subfolders created in the encrypted folder are
automatically encrypted. It is recommended that you encrypt at the
folder level.
You
can also encrypt or decrypt a file or folder using the command-line
function cipher. For more information about the cipher command, type
cipher /? at a command prompt.
Main
points about EFS
Only
files and folders on NTFS volumes can be encrypted.
You
cannot encrypt files or folders that are compressed. First you must
uncompress the file or folder, then you can encrypt it. On a
compressed volume, uncompress folders you want to encrypt.
You
cannot share encrypted files.
Encrypted files can become decrypted if you copy or move the file to
a volume that is not an NTFS volume.
Use
cutting and pasting to move files into an encrypted folder. If you
use a drag-and-drop operation to move the files, they will not
automatically be encrypted in the new folder.
System files cannot be encrypted.
Encrypting a folder or file does not protect against deletion.
Anyone with delete permission can delete encrypted folders or files.
|
