a 2nd person can delete a file encrypted by the 1st in EFS,Why?

[greyman]

hello,

i had this question in my mind for quite some time...

If efs is built to deny access of an encrypted file to a 2nd
person,then why
should he be given access to delete the same file??

I have tried this scenario where 2nd person was able to delete the file
encrypted by the 1st person...

efs is about securing ur info from others...whats its use if one can
just
delete ur confidential info??

Please reply..

Thanks.

 

[Maincat]

You are confusing rights and permissions.

EFS is about encryption - allowing the right to selected people to read a
file. It is not about the permission to delete it.

Happy Xmas

 

[Rock]

hello,

i had this question in my mind for quite some time...

If efs is built to deny access of an encrypted file to a 2nd
person,then why
should he be given access to delete the same file??

I have tried this scenario where 2nd person was able to delete the file
encrypted by the 1st person...

efs is about securing ur info from others...whats its use if one can
just
delete ur confidential info??

Because EFS does not do that. It just encrypts so it can't be read. Set
permissions on the file or folder if you want to control who can delete it.

How to set, view, change, or remove file and folder permissions in Windows
XP
http://support.microsoft.com/kb/308418/en-us

How to set, view, change, or remove special permissions for files and
folders in Windows XP
http://support.microsoft.com/kb/308419/en-us

Encrypting File System in Windows XP and Windows Server 2003
http://www.microsoft.com/technet/prodtechnol/winxppro/deploy/cryptfs.mspx

How To Encrypt a Folder in Windows XP
http://support.microsoft.com/?id=308989

How To Remove File Encryption in Windows XP
http://support.microsoft.com/?id=308993

How To Encrypt a File in Windows XP
http://support.microsoft.com/?id=307877

HOW TO: Share Access to an Encrypted File in Windows XP
http://support.microsoft.com/?id=308991

Best practices for the Encrypting File System
http://support.microsoft.com/?id=223316

How to back up the recovery agent Encrypting File System (EFS) private key
in Windows Server 2003, in Windows 2000, and in Windows XP
http://support.microsoft.com/?id=241201

How to add an EFS recovery agent in Windows XP Professional
http://support.microsoft.com/?id=887414

 

[Vanguard]

hello,

i had this question in my mind for quite some time...

If efs is built to deny access of an encrypted file to a 2nd
person,then why
should he be given access to delete the same file??

I have tried this scenario where 2nd person was able to delete the
file
encrypted by the 1st person...

efs is about securing ur info from others...whats its use if one can
just
delete ur confidential info??

Please reply..

Thanks.

Since when does encryption equate to delete protection? You can encrypt
using LOTS of methods. E-mails can be sent encrypted. Winzip and other
archive tool can create password-protected files (where the contents is
encrypted). Do some research. I suggest you learn what are
PERMISSIONS.

One person has a can opener so they can look inside the can. The other
person doesn't have a can opener. So just how does who has the can
opener prevent either person from tossing the can in the trash? It
doesn't.