Hi Ruben-
The user session authentication (via Kerberos) should help ensure the proper
user is getting the redirected data. If you wanted to add some additional
layers you could enable SMB signing requirements for Server and workstation,
or IPSec policies.
Here's some additional info and the public link for it:
Host redirected file shares on servers running Windows 2000 or Windows
Server 2003
To provide the best protection as data is transmitted over the network,
ensure that you set up the redirected folders shares on servers running
Windows 2000 and later. The Kerberos, IPSec, and SMB signing security
features of Windows 2000 and Windows Server 2003 help protect the users'
data.
Using the NTFS file system for user data volumes
Always configure the servers hosting redirected files to use NTFS to provide
the most secure configuration.
Do not rely on EFS to encrypt users' files when transmitted over the network
When you use EFS to encrypt files on a remote server, the data is encrypted
only while it is stored on the disk, not when it is transmitted over the
network. The exceptions to this are when your system includes IPSec or Web
Distributed Authoring and Versioning (WebDAV). IPSec encrypts data while it
is transported over a TCP/IP network. If the file is encrypted before being
copied or moved to a WebDAV folder on a server, it remains encrypted during
the transmission and while it is stored on the server.
http://www.microsoft.com/resources/...2003/all/deployguide/en-us/dmebc_dsm_iqiu.asp
Please repost if you have additional questions or concerns.
