Warning: iconv_mime_decode() [function.iconv-mime-decode]: Malformed string in /home/secureg/public_html/lib/standard.lib.php on line 2251
Implementing EFS
Implementing EFS

Implementing EFS
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Implementing EFS SPS 04-01-2008
Posted by =?Utf-8?B?U1BT?= on April 1, 2008, 11:01 am
If you were  Registered and logged in, you could reply and use other advanced thread options
What is the best way to implement EFS to encrypt 500GB of data-at-rest stored
on a NAS server that is sitting in a backend domain/DMZ. This share has to be
accessed by web servers sittings on a front end domain/DMZ. The DMZs are
separated by a FW that only allow traffic over specific ports between these
domains. We do not have PKI implemented at the enterprise in this network
setup. Do we need to have PKI for EFS?

Posted by =?Utf-8?B?U1BT?= on April 1, 2008, 11:44 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Say, for testing purposes... the IIS running on the web server(on
ParentDomain.com) has a virtual directory that points to a NW share(on
childDomain.parentdomain.com) that is encrypted using EFS.
what is the best way to accomplish access to encrypted storage from the
webserver?



Posted by GreenieLeBrun on April 1, 2008, 7:47 pm
If you were  Registered and logged in, you could reply and use other advanced thread options


SPS wrote:
> What is the best way to implement EFS to encrypt 500GB of
> data-at-rest stored on a NAS server that is sitting in a backend
> domain/DMZ. This share has to be accessed by web servers sittings on
> a front end domain/DMZ. The DMZs are separated by a FW that only
> allow traffic over specific ports between these domains. We do not
> have PKI implemented at the enterprise in this network setup. Do we
> need to have PKI for EFS?

I can't answer your question but the following links may be of help:-

The Encrypting File System
http://www.microsoft.com/technet/security/topics/cryptographyetc/efs.mspx

Best practices for the Encrypting File System
http://support.microsoft.com/kb/223316/en-us

How to back up the recovery agent Encrypting File System (EFS) private key
in Windows Server 2003, in Windows 2000, and in Windows XP
http://support.microsoft.com/kb/241201

How To Encrypt a Folder in Windows XP
http://support.microsoft.com/?id=308989

How To Remove File Encryption in Windows XP
http://support.microsoft.com/?id=308993

How To Encrypt a File in Windows XP
http://support.microsoft.com/?id=307877

HOW TO: Share Access to an Encrypted File in Windows XP
http://support.microsoft.com/?id=308991



Similar ThreadsPosted
GetEffectivePermissions and Implementing DACL Inheritence August 26, 2005, 7:41 pm
still having problems after implementing the revised MS06-015 July 15, 2006, 6:35 am
Implementing security for a "very secret document" November 2, 2007, 9:21 am
Small error in "Best Practices for Implementing a MS W2003 PKI" June 30, 2005, 9:31 am
A technical question for implementing CIS's Windows XP Professional Benchmark November 28, 2007, 4:37 pm

The site map in XML format XML site map

Contact Us | Privacy Policy