Information Technology Reference
In-Depth Information
can happen if an administrator resets a user's password, the user account is deleted, or the user
leaves the company. To encrypt a file, click the Advanced button in the General tab of a file's
Properties dialog box, and then click Encrypt contents to secure data (see Figure 6-6). To see the
recovery agent and which accounts can access the encrypted file, click the Details button to open
the dialog box shown in Figure 6-7.
6
Figure 6-6
The Advanced Attributes dialog box
Figure 6-7
Viewing user access to an encrypted file
A user must have a valid EFS certificate to be added to an encrypted file's access list. EFS is
set up to issue an EFS certificate automatically to any user who encrypts a file. Users can also be
issued a certificate from a certificate server. Recovery agents are identified by certificates, too,
but recovery agent certificates can't be used as EFS certificates and vice versa. Certificates and
Active Directory Certificate Services are discussed in Chapter 11.
 
Search WWH ::




Custom Search