unicorn said:
Hi,
I need a practical example why the support for the use of groups on
encrypted files is not provided by EFS. I need this details to enrich my
assignment.
Thanks for your help.
All covered in detail in Chapter 17 of the Windows XP Resource Kit
Documentation.
see
http://www.microsoft.com/resources/...Windows/XP/all/reskit/en-us/prnb_efs_qutx.asp
Authorizing Multi-User Access to Encrypted Files
Users can share encrypted files with other local, domain, and trusted domain
users. Authorizing user access to encrypted files is a separate process from
sharing files for network access by using share-level security and access
control lists. Because there is no method to issue a certificate for a
group, only individual user accounts can be authorized for access to an
encrypted file. Groups cannot be authorized for access.
You cannot issue a certificate to a group as certificates must be issued to
security principles that represent an object that authenticates to the
directory service (e.g users or machines - not groups)
--
Regards,
Mike
--
Mike Brannigan [Microsoft]
This posting is provided "AS IS" with no warranties, and confers no
rights
Please note I cannot respond to e-mailed questions, please use these
newsgroups
