share encrypted files/folders

[mectst]

I have a main-folder with many subfolders (~250 folders) and
apprpximately 10.000 files in it.
The main-folder including all subfolders and files is encrypted by a
single user.
Now some other users (with account on this machine) need access to the
main-folder and of course to all these files. They have the correct
privileges to the main folder and all files in it.
My problem is how to add this users to share the encryption? As I know,
it is possible to share single file.
Has anyone a solution for many files or recursivle on a folder?

Thanks
TST

 

[John7]

I have a main-folder with many subfolders (~250 folders) and
apprpximately 10.000 files in it.
The main-folder including all subfolders and files is encrypted by a
single user.
Now some other users (with account on this machine) need access to the
main-folder and of course to all these files. They have the correct
privileges to the main folder and all files in it.
My problem is how to add this users to share the encryption? As I know,
it is possible to share single file.
Has anyone a solution for many files or recursivle on a folder?

Thanks
TST

Hi,


Sorry to ask, why encrypt ... ?
There are some serious dangers when encrypting.
Picture this ....
The security ID of this SINGLE user who choose to encrypt is used in the
encryption process.
If this account gets damaged and must be recreated, the 10.000+ files can no
longer be decrypted, jikes !

Better is to create :
- a top level folder/drive share with ALL rights
- a few user groups according to user's respective access authorisations
- assigning access rights by these user groups.

HTH,
John

 

[Patrick Keenan]

I have a main-folder with many subfolders (~250 folders) and
apprpximately 10.000 files in it.
The main-folder including all subfolders and files is encrypted by a
single user.
Now some other users (with account on this machine) need access to the
main-folder and of course to all these files. They have the correct
privileges to the main folder and all files in it.
My problem is how to add this users to share the encryption? As I know,
it is possible to share single file.
Has anyone a solution for many files or recursivle on a folder?

Thanks
TST

http://www.microsoft.com/windowsxp/using/security/expert/sharefilesefs.mspx

But, the very first thing to do is to either remove the encryption or back
up the account credentials. If that account is damaged in any way and the
credentials were not backed up, you will permanently lose access to the
data. You should also create a recovery agent. Backups should be
regularly tested and verified and stored securely.

MS did a pretty good job of providing strong encryption and making it easy
to invoke - but not so good a job in communicating the risks or forcing
credential backups. I've seen a number of people permanently lose data
for this reason.

http://www.practicalpc.co.uk/computing/windows/xpencrypt1.htm

HTH

-pk

 

[mectst]

http://www.microsoft.com/windowsxp/using/security/expert/sharefilesefs.mspx

But, the very first thing to do is to either remove the encryption or back
up the account credentials. If that account is damaged in any way and the
credentials were not backed up, you will permanently lose access to the
data. You should also create a recovery agent. Backups should be
regularly tested and verified and stored securely.

MS did a pretty good job of providing strong encryption and making it easy
to invoke - but not so good a job in communicating the risks or forcing
credential backups. I've seen a number of people permanently lose data
for this reason.

http://www.practicalpc.co.uk/computing/windows/xpencrypt1.htm

HTH

-pk

First: Thanks to all your comments.

Second:

http://www.microsoft.com/windowsxp/using/security/expert/sharefilesefs.mspx

I know this article - but it works only for a single file and not for
folders with subcomponents. Obviolsly this way is not practicable for
moer ~10.000 and more files!

Third:
I'm sure that all necessary steps for backup are performed.

TST

 

[Dr. C.Joseph Drayton, Ph.D. AS&T]

I have a main-folder with many subfolders (~250 folders) and
apprpximately 10.000 files in it.
The main-folder including all subfolders and files is encrypted by a
single user.
Now some other users (with account on this machine) need access to the
main-folder and of course to all these files. They have the correct
privileges to the main folder and all files in it.
My problem is how to add this users to share the encryption? As I know,
it is possible to share single file.
Has anyone a solution for many files or recursivle on a folder?

Thanks
TST

Hi TST,

If I am understanding what you are trying to accomplish, I would go
about it in a different way. I would create a TrueCrypt container.

TrueCrypt containers are as secure as EFS, but are much easier to
access over a network and will not be lost if the Windows Security
Certificate is lost.

Ciao . . . C.Joseph

And on the seventh day God said,
"I will rest . . . Murphy take over."