XP Pro File Encryption

[bbford]

I understand that in XP Pro, encrypted files are automatically decrypted
when the user logs on and automatically encrypted when the user logs off.

But is there an option in XP Pro that this could be done manually?

For example, when the user logs on, their files stay encrypted until they
want to access them, then they would have to enter a separate password, much
like the way PGP or Winrar file encryption works.

 

[Carey Frisch [MVP]]

No, Windows XP Pro does not encrypt or decrypt files automatically
when a user logs on or off. Here is the scoop on file encryption:

Encrypting File System in Windows XP
http://www.microsoft.com/technet/prodtechnol/winxppro/deploy/cryptfs.mspx

Best Practices for the Encrypting File System
http://support.microsoft.com/default.aspx?scid=kb;en-us;223316

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

-----------------------------------------------------------------------------------------


|I understand that in XP Pro, encrypted files are automatically decrypted
| when the user logs on and automatically encrypted when the user logs off.
|
| But is there an option in XP Pro that this could be done manually?
|
| For example, when the user logs on, their files stay encrypted until they
| want to access them, then they would have to enter a separate password, much
| like the way PGP or Winrar file encryption works.

 

[Steven L Umbach]

If there are indeed EFS encrypted files that the user has encrypted, then to the user
the process is transparent as long as the user's EFS private key is on the computer
or available via roaming profile. If the user has exported/deleted his private key,
he will have to import the certificate/private key .pfx file and will have to enter
the password protecting the private key that he gave it during the export operation
before he can access EFS files. Keep in mind that as long as the users private key
is on the computer, that the EFS encryption is only as strong as his password
assuming no other barriers are present such as a computer startup password or syskey
boot password. --- Steve