File encryption

[Gary Cannon]

We are looking at trying to use microsoft encryption on
the server hard drive to secure PHI as per HIPPA. We have
encrypted a few test files, moved and copied into folders
that can be used by multiple users. By design, I thought
only the user that encrypted the file could open it, but
tried just to see if it would work. For HIPPA it's
adressable to have PHI encrypted while it sets on the
server. Does microsoft have a folder/file encription that
can be shared by domain users?

 

[Drew Cooper [MSFT]]

We allow adding users to encrypted files on a per-file basis. This can be
done at the API level on Win2k and via UI on XP and Server 2003.
To share the files on a network (SMB) share, the server must be trusted for
delegation in the AD. XP and Server 2003 machines may also share files
using the WebDAV redirector which doesn't require trusting for delegation.

EFS whitepaper:
http://www.microsoft.com/windowsxp/pro/techinfo/administration/recovery/default.asp