|
Posted by Miha Pihler [MVP] on January 7, 2006, 4:24 pm
If you were Registered and logged in, you could reply and use other advanced thread options
Hi Jose,
the way EFS works you have to be able to decrypt the file before you can
copy it. Now the user is able to do anything he likes with the file -- but I
guess from what you describe the roaming profile synchronization does not
work under users credentials and therefore can't copy the file.
My best advice I can give is to instruct your users not to encrypt any files
in their profile.
One recommendation there is for EFS use is to mark a folder on a hard drive
as encrypted and then put confidential files in this folder (e.g. D:\Data
Files). Since this folder would not be a part of a profile it would not
cause any problems with roaming profiles.
I believe this problem will be solved in Vista.
--
Mike
Microsoft MVP - Windows Security
>I have deployed an Enterprise CA on a Windows 2000 domain. I have
> encrypted a file on my desktop on a Windows XP workstation. I am using
> a roaming profile. Currently, when I log off, I get the following
> error(copied from event viewer):
>
> Event Type: Error
> Event Source: Userenv
> Event Category: None
> Event ID: 1513
> Date: 1/5/2006
> Time: 11:28:07 AM
> User: MYDOMAIN\myusername
> Computer: MYPC
> Description:
> Windows cannot copy your profile because it contains encrypted files
> or directories. The keys to decrypt the files or directories are also
> stored in the profile and are not available now. Please decrypt the
> files and try again.
>
> I have checked using efsinfo to see if there is a recovery agent, and
> there is, here is the output:
> testing.txt: Encrypted
> Recovery Agents:
> Unknown (Administrator(Administrator@MYDOMAIN.COM))
>
> Of course, my profile is not being copied over to the profile share
> because of this profile error. I would like to deploy EFS for laptop
> users, however, I would like them to be logging on to the laptops under
> their domain credentials.
>
> Any comments or help are appreciated!
>
| 
XML site map