|
Posted by =?Utf-8?B?TWFyaw==?= on December 13, 2006, 4:09 pm
If you were Registered and logged in, you could reply and use other advanced thread options
OST/PST’s with EFS correct?
As for your suggestion for placing PST’s on the network drives, Microsoft
doesn’t support Syncing PST’s using Offline files out of the box. We have
circumvented this on a few machines as a test and while, they did sync we had
people with extremely long syncs because PST’s tend to grow upwards of
several gigs. Plus using this practice still leaves the OST on the machine
and vulnerable.
Our best strategy is to encrypt the PST/OST’s if possible.
Thanks,
Mark
"S. Pidgorny <MVP>" wrote:
> Yep. Place the files on a network drive that can be made available offline
> (like My Documents in most enterprise deployments), XP will use system EFS
> key (and not the user's key) to encrypt offline files cache. Unless you
> protect that with syskey startup password or disc, or use full disc
> encryption, that protection is as good as none.
>
> I'd like to stress the point that there is only one level of encryption of
> PST that is real protection (and it's not default).
>
> --
> Svyatoslav Pidgorny, MS MVP - Security, MCSE
> -= F1 is the key =-
>
> > Thanks for the response. I understand the different encryption levels
> > within
> > Outlook PST's as the KB article states. However our company requires that
> > all sensitive data be encrypted. We have implemented Microsoft's EFS and
> > would like to use EFS to encrypt both the PST and OST files. My question:
> > Are there any known issues in using EFS to Encrypt OST and PST files?
> >
> > Thanks,
> > Mark
> >
> > "S. Pidgorny <MVP>" wrote:
> >
> >> Yep. "Compressible" encryption is known to be weak as useless:
> >>
> >> The default security setting is the Compressible Encryption option. Use
> >> the
> >> Compressible Encryption option if disk space is more important than
> >> security. If security is more important that disk space, use the High
> >> Encryption option, and then select a password for your .pst file.
> >>
> >> Source: http://support.microsoft.com/?id=829971
> >>
> >> --
> >> Svyatoslav Pidgorny, MS MVP - Security, MCSE
> >> -= F1 is the key =-
> >>
> >> > Are there any issues with using Microsoft EFS to encrypt OST and PST
> >> > files?
> >> >
> >> > Thanks in advanced for your assistance,
> >> > Mark
> >> >
> >>
> >>
> >>
>
>
>
| 
XML site map