Windows Encrypted File System (EFS)

Two recent editions of TechNet Magazine included excellent articles on Deploying EFS. Part 1 is here and Part 2 is here. I recently came across the article Prevent data theft with Windows Vista’s Encrypted File System (EFS) and BitLocker which discusses using EFS and BitLocker together in certain cases as they tend to compensate for each other’s weaknesses.

BillCan recently announced the beta version of a tool for enforcing EFS encryption.

Basically, the EFS Assistant is a small software application that is installed on a user’s laptop (or desktop) that enforces the encryption policy the administrator pushed to the client via Group Policy. The beta version of the tool can do the following:

  • Encrypt specific default folders that Microsoft recommends (e.g., My Documents, etc.)
  • Encrypt additional folders as configured by the administrator (for example, a folder holding data for a custom-built application)
  • Do not encrypt default folders that Microsoft recommends leaving unencrypted (e.g., Program Files, Windows directory)
  • Do not encrypt folders as configured by the administrator (for example, the application files for a custom-built application)
  • Scan the disk and encrypt folders that mostly or exclusively contain data files
  • Record the results of its encryption run in WMI for reporting via SMS or other management tools

Steve Mullen has been involved in information technology for over 35 years. He is also actively involved in the music program (voice and English hand bells) and Vestry of St. Anne’s Episcopal Church in Damascus, MD.

Posted in Active Directory, BitLocker, Blog, encryption, Security, Vista, Windows
One comment on “Windows Encrypted File System (EFS)
  1. Desktopjunk says:

    Thanks, always good posts on your blog!

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

March 2007
« Feb   Jun »
%d bloggers like this: