Microsoft® Windows Server 2003: Administrator’s Companion
by Charlie Russel, Sharon Crawford, Jason Gerend
Securing Local Data
Encryption of stored files in Windows Server 2003 is accomplished through the use of EFS. Using public-key encryption, EFS allows files and directories stored on NTFS partitions to be encrypted and decrypted transparently. EFS accesses the user’s EFS public and private keys to perform self-encryption. Therefore, files encrypted with EFS can’t be shared with (that is, encrypted to) other users. Another encryption method, such as S/MIME, must be used to securely share files with other users. In addition, if files encrypted with EFS are saved to another machine, the user’s key information must be imported to that machine for decryption to occur.
Files are automatically encrypted to a third party, called a recovery agent. In ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access