using efs

[Ward Taylor]

Hi:
I would like to use win2k's built-in file encryption efs to encrypt the my
documents folder on my laptop.
When I do this though, if I access an encrypted file during a session, when
I shutdown or logoff, it hangs at "saving your settings" for about a minute.
Then, examination of the event log shows this message:

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1000
Date: 10/16/2003
Time: 5:23:34 PM
User: NT AUTHORITY\SYSTEM
Computer:
Description:
Windows cannot unload your registry file. If you have a roaming profile,
your settings are not replicated. Contact your administrator.

DETAIL - Access is denied. , Build number ((2195)).
I do not have a domain account or a roaming user profile. My user account
is local to the machine.
Further troubleshooting indicates that lsass.exe is holding a registry key
open in my user hive.
Anyone have any thoughts on this?
Hp laptop, win2k sp4, latest patches.
Even though I have sp4, it has acted like this always.
Thanks

 

[Kelvin Yiu [MSFT]]

Did you encrypt your user profile (everything under C:\documents and
settings\[user name]) or just the "My Documents" folder?

EFS does not support encryption of the user profile.

Kelvin

 

[Ward Taylor]

Just the my documents folder.

 

[Drew Cooper [MSFT]]

I believe that we only support encrypted My Documents if the folder is
redirected.