EFS & built-in Search engine

[marc ochsenmeier]

Hi everybody,

it really looks like as if encrypted files and folders (using the Windows
built-in Encrypting File System - EFS) are not participating to the items
that are searched using the built-in indexing engine. Can anyone please
confirm this? Should this be confirmed, then I will use other crypting
engine...

Best regards,
Marc Ochsenmeier
www.propagating.net

 

[Guest]

Disclaimer: I have not investigated this issue myself.

What makes you say that it appears that the contents of encrypted files /
folders are not being included in searches conducted in Vista. (Excuse me for
reformulating your question, but I do so to be sure that I am understanding
and properly representing your claim.)

EFS is SUPPOSED to be transparent. That is to say that, if I happen to be
the authorized user (for the EFS-encrypted files) then any operation I
perform on those files should simply happen without any issue. However, if I
log in as a DIFFERENT user than the one who encrypted the files, then their
contents should, indeed, be off limits to me and to my search activities.

 

[Guest]

Darn! I just wiped a test machine that was running Vista! I would really like
to test it to see if I can duplicate what you're reporting, apache255. But I
don't want to fiddle around with my main system, you know? It has always been
hard for me to reconcile the idea of combining encryption with indexing --
for, I think, obvious reasons. It would seem that the index would be a
security risk. On the other hand not being able to index large quantities of
encrypted material would seem to be a headache for the user, too.

My particular uses and applications and preferences have led me to use third
party encryption and to just forget about indexing what has to be encrypted.
I'm going to watching this thread and doing some research on the side.

I just wish I hadn't been so quick to stick BSD on that test box. But that's
a project for work that has waited too long as it is.