How to share EFS encrypted files over a network (\\workstation\c$\encrypted-file.txt)

Hello,
we decided to theft-protect our workstations by using EFS encryption on some important documents and directories.
Just to be sure: I hope that data will not be readable in the case that someone physically gains access to the disk or computer with encrypted data and does not know user's name & password to log in or does not have the right encryption certificate with
private key. Please correct me, if I'm wrong.
All workstations are Windows 7 Professional joined to the domain controlled by Windows 2008R2 DC. We are a bit lazy, so we have generated a local, self-signed EFS certificate on a single workstation and installed this (the same) certificate on all workstations.
Now, we are able to share EFS encrypted files for example via a NTFS formatted flash drive.
Later, we have setup a Certificate authority (we can potentially issue new EFS personal, domain-based certificates that are published in AD), and established DRA as well (published DRA via a Group Policy).
All logged-in users have the same (non-domain) certificate installed in their "My User Account" certificate store, cipher /y command shows the same thumbprint value.
However, we would like to be able access files remotely, in a "lazy" way using an administrative share like
\\workstation\c$\users\bob\document.txt. We all are Domain Admins, so NTFS and SMB privileges should be OK, unencrypted files are accessible OK.
I have tried to issue a new certificates via the Cert Authority, putting them into "Trusted People" container etc., adding them to the "Users who can access this file:" list on the encrypted file and nothing worked.
So is it possible to share EFS encrypted files over a workstation's share (i.e.
\\workstation\something)?
What should I do to get it working? :-)
Thank you for any ideas.
Jan

OK, I understand that. However, I have read this article
Using Encryption File System (Technet)
and there is stated "Remote EFS operations on files stored on network file shares are possible in Windows 2000 or later domain environments only. Domain users can remotely encrypt or decrypt files,
but this capability is not enabled by default"
There are notes about computer trust etc., so I am seeking for someone who would help me a little bit with this.
Just imagine the simplest possible "single-user" case: there are two Win7 computers A, B joined into the domain and just single user BOB. Bob uses those two computers and need to access own documents like
\\A\DocumentsA or
\\B\DocumentsB. Standard setup - folder sharing: everything is working fine, share and NTFS permissions are set up, BOB can work with his own "remote" documents from both computers (\\A\DocumentsA from computer B and
vice versa).
BOB decides to encrypt his documents. So BOB logs in computer A, starts "Manage file encryption certificates Wizard", gets an EFS Certificate from CA and encrypts his c:\Documents (shared as
\\A\DocumentsA). I assume the EFS certificate is stored on computer A in BOB's local profile, therefore I ask:
Now, BOB moves to the computer B and logs on.
Q1: Will be \\A\DocumentsA accessible for BOB from B?
Q2: If not, what should do now? Should I do something in AD for computer accounts (A and/or B) ?
Thank you.

Similar Messages

  • Streaming audio file over the network w JMF. How to know when the file end

    Hi
    I am streaming audio file over the network using JMF. I want to be able to know when a file end so I can close the streaming session.
    Can some one please help
    Thanks

    If you put a ControllerListener on the Processor that's associated with generating the RTP stream, it'll generate an "EndOfMedia" event when the end of the file is reached.

  • Sharing Files over a network!

    I'm on a network with many other users, some of which are PC's and was wondering how I could share some of my files over the network. How would I go about making a folder or group of folders which are able to be accessed (either with or without a password) on the network. Making sure that only the files within the specified folders is placed on the network?
    Any help would be much appreciated!
    Thanks!

    Checkout SharePoints.

  • Relinking files over a network

    This is more of an After Effects issue but I thought someone here might be able to help me or point me in the right direction.
    I have a project that was created entirely with still images (almost 200,000) shot with a Canon 5D.  I converted the CR2 (RAW) to jpegs and edited the project in Final Cut Pro using those jpegs.  I then used Automatic Duck to send the FCP project to After Effects where I used the Batch n Replace script from aescripts.com (thanks Lloyd!) to replace the jpegs with the CR2 files for color correction.  The problem I'm running into is the script creates a new project where the CR2 files have replaced the jpegs, however everything is offline.  The images for each sequence are sorted into folders so I go to the first image in  a folder and tell AE to replace it with the proper file.  AE thinks for a bit and finds and replaces all of the other images in that folder.  Depending on how many images are in a particular folder, it can take anywhere from 5 minutes to several hours for AE to finish.  It took over 4 hours for AE to relink a project with 10 shots/images sequences containing over 12,000 images.
    All of the AE project files are shared via Dropbox with the other Mac Pro in my studio.  I opened one of the projects on the other computer and tried to relink to the CR2 files on my RAID over the network but I had to do each image one by one.  Is there a way to relink the files over the network the same way as if they were on my own computer?

    This is more of an After Effects issue but I thought someone here might be able to help me or point me in the right direction.
    I have a project that was created entirely with still images (almost 200,000) shot with a Canon 5D.  I converted the CR2 (RAW) to jpegs and edited the project in Final Cut Pro using those jpegs.  I then used Automatic Duck to send the FCP project to After Effects where I used the Batch n Replace script from aescripts.com (thanks Lloyd!) to replace the jpegs with the CR2 files for color correction.  The problem I'm running into is the script creates a new project where the CR2 files have replaced the jpegs, however everything is offline.  The images for each sequence are sorted into folders so I go to the first image in  a folder and tell AE to replace it with the proper file.  AE thinks for a bit and finds and replaces all of the other images in that folder.  Depending on how many images are in a particular folder, it can take anywhere from 5 minutes to several hours for AE to finish.  It took over 4 hours for AE to relink a project with 10 shots/images sequences containing over 12,000 images.
    All of the AE project files are shared via Dropbox with the other Mac Pro in my studio.  I opened one of the projects on the other computer and tried to relink to the CR2 files on my RAID over the network but I had to do each image one by one.  Is there a way to relink the files over the network the same way as if they were on my own computer?

  • Replacing/relinking files over a network

    This might be an OS issue and not related to After Effects but I thought I would give it a shot here.
    I have a project that was created entirely with still images (almost 200,000) shot with a Canon 5D.  I converted the CR2 (RAW) to jpegs and edited the project in Final Cut Pro using those jpegs.  I then used Automatic Duck to send the FCP project to After Effects where I used the Batch n Replace script from aescripts.com (thanks Lloyd!) to replace the jpegs with the CR2 files for color correction.  The problem I'm running into is the script creates a new project where the CR2 files have replaced the jpegs, however everything is offline.  The images for each sequence are sorted into folders so I go to the first image in  a folder and tell AE to replace it with the proper file.  AE thinks for a bit and finds and replaces all of the other images in that folder.  Depending on how many images are in a particular folder, it can take anywhere from 5 minutes to several hours for AE to finish.  It took over 4 hours for AE to relink a project with 10 shots/images sequences containing over 12,000 images.
    All of the AE project files are shared via Dropbox with the other Mac Pro in my studio.  I opened one of the projects on the other computer and tried to relink to the CR2 files on my RAID over the network but I had to do each image one by one.  Is there a way to relink the files over the network the same way as if they were on my own computer?

    Thank you all for responding.
    DaveS,
    Ideally we would be able to work on two computers, sharing the project files via Dropbox.  As it stands now, we do have the same file paths on each computer for the images, just the work hard drives have different names.
    Computer 1: Hard Drive A: Project Folder: Project Stills: CR2 files
    Computer 2: Hard Drive B: Project Folder: Project Stills: CR2 files
    It does take a long time to relink the files but I think that is in large part due to the nature of the project.  Do you know of a way that could speed up this process?
    And it was a project with 12,000 still image footage items
    Dave L,
    The jpegs exported form Lightroom are 5616x3744.  FCP has a frame size limitation so I would make a sequence set to 4096x2731 and place the jpegs in there.  Think of those sequences as quicktime files.  I would use them to do the edit in my 2K sequence.  Once the edit was in AE, I would resize those 4K sequences to 5616x3744, tweak my edit/frame/scale as necessary.
    Mylenium,
    That article is pretty interesting, espceially since we have been talking about trying out the Blackmagic camera, however, working with quicktimes isn't an option for this project for various reasons.  If we were strictly editing on 1s we could do that but we often change parts of a single shot to 3s or 4s and will hold on a single image for a moment.  Going back and making new quicktimes everytime we wanted to make a change like that would probably be more time consuming than the issue we are having now.  And storage for 5K quicktimes would be an issue as well.
    When I wrote that first post, a deadline was approaching fast and we were worried we wouldn't make it but we did.  Now we have some time and are looking at ways to make this process as efficient as possible.  We are in the color correction and compositing stage so everything is mostly going to be done in AE. 
    The whole project is 40 minutes long and we have each scene as its own AE project.  When they are all combined into the master AE project, the file size is 1.5 GB and it takes over an hour to open.  Ideally, we wouldn't need to open that project very often, really only when we are doing exports.  Is there a way to bring that file size down while still retaining the RAW images.  Is there a way to somehow proxy the scene projects in the master project?  Do you know if Adobe is working on ways to improve working with CR2/RAW in AE?
    I know this a weird workflow and not really what AE was designed to do, but without spending $100,000+ at a high end post house, this is the best workflow we could come up with, while still retaining the RAW information.  We tried working with TIFFs but the sheer volume of images we have and each TIFF image averaging 100 MB it was too much of a storage burden.  If anyone has any suggestions to help with any of this or someone from Adobe can shed some insight, I will be forever grateful.

  • Send wav files over a network

    Hi folks,
    I need to send sound files over a network. The files I'm wanting to send are wav files. I kinda have the mechanism that sends a file, but I am not sure how to convert wav files into something that I can easily send. Do I need to convert them into bytes, serialize them...etc I don't know.
    Can anyone please point me in the right direction? An example would be very much appreciated.
    Thank you,
    E

    hi
    this is very simple
    convert voice to bytearray
    just create one server socket and client socket then connect a sockets and transmit
    download sample from
    http://javasolution.blogspot.com/2007/04/voice-chat-using-java.html

  • Corporate Win7/Office 2010 | Severe Lag when opening Office 2010 files over the network

    Good Evening Everyone,
    I work in a corporate environment for one of the top banks in the country (USA). We recently upgraded our computers to Windows 7. (The image has office 2010 included in the build)
    I've been experiencing some severe lag when opening Office files over the network. Let me start by saying I've researched a lot and have yet to find a solution that works or even makes much of an improvement. 
    Notes: My laptop is new (64-bit Win 7 Enterprise). The remote desktop where the files lie is new as well. (64-bit Win 7 Enterprise) Both computers have good hardware and more than enough juice to handle applications. 
    There are certain files I work on along with other co-workers that we store on a computer within the office. We simply create shortcuts to the files on our local machines and make changes, etc. from there. However, after this upgrade, every time I try to
    open a file on the remote computer, it takes over a 1 minute to load. I've spoken to our support team who sent someone out and confirmed it's not the network. 
    Both computers are on the same subnet as well. I've changed the trust center settings on both the client computers and "server" to trust any computer on the network. I have also changed the network card's speed from "Auto Negotiate" to
    full duplex 100mbps with no luck.
    I am out of options here and in desperate need for a fix. Even saving changes to a file we work on takes forever. 50% of the time when I close a spreadsheet, the title bar has a not responding message and takes a minute to eventually close. 
    PS: Extra Info : All computers run McAfee AV and use McAfee for disk encryption. I've confirmed all computers are up-to-date in every respect with the AV software. 
    Thanks,

    Try: 
    Open My Computer.
    Open the Tools menu and choose Folder Options...
    Select the File Types tab.
    Select the extension (for example DOC, or XLS) of the file that is slow to open.
    In the Details section, click [Advanced], and another dialog box will open. 
    In the Actions section, click Open then click [Edit...], and another dialog box will open.
    http://windowssecrets.com/forums/showthread.php/149672-10-9-2012-Updates-and-very-slow-opening-of-Office-files
    KR

  • WIFI dies when transferring big files over the network

    Hi, I have Dell Inspiron 1520 with ipw3945 driver, when I transfer big files over the network, my wifi dies, anybody knows what could it be? If you need additional information, feel free to ask...
    Thanks in advance

    I guess we shall see. I can't imagine we are the only 7 with these issues.  Mine is mainly just lag... and overall slowness.  I hope to work through this.  If it lasts much longer I will have to revert back all 3 of my lappies to FC which I really do not want to do.  But on the lappies i connect via wireless 90% of the time and need it to work. 
    By the way how are you guys configuring your wifi?  I am using the iwl drivers and wicd.
    Well I did some more testing and loaded up netcfg and still get the same results so that rules out that part.  I also did some packet captures and I am getting a bunch of tcp retransmissions followed by tcp segment lost followed by a reset which in turn kills my rdp session (remote desktop protocol). I also went back several versions of the uucode driver and still get the same reults so I guess it seems to be a kernel issue.  Back to FC I go.  Damn shame...
    Last edited by BKJ (2008-10-08 01:08:56)

  • ITunes library stored on an external hard drive which is connected to my airport extreme, I wish to share my iTunes library over my network, I can do this with my laptop, but not with my iPad, can anyone tell me if it is possible

    I have my iTunes library stored on an external hard drive which is connected to my airport extreme, I wish to share my iTunes library over my network, I can do this with my laptop, but not with my iPad, can anyone tell me if it is possible

    You can't connect directly to the external drive, but should be able to use iTunes Home Sharing via the laptop.
    http://support.apple.com/kb/PH1453

  • Cannot Copy Files over a network

    I've had a new hard drive installed in iMac by Apple, and Apple re-installed the OS, which is running 10.6.7 (all current software updates are installed). The iMac is part of a network connecting to a OS X Server 10.4.10
    All of the Network Drives have been connected, the user can copy documents under 1MB to and from the server fine. However if we try to copy files over 1MB the first file will copy fine, but then no more files can be copied to the server from this machine, regardless of the size.
    If i use another Mac, with the same user credentials I can copy files of any size without any issues. I have tried connecting to the Network using both the Ethernet port and Airport but I experience the same issue regardless.
    If I reboot the iMac I can copy a file over 1MB again and then the symptoms re-present themselves. I have tried creating a users, new network drives, folders etc. I can connect using any user, to any of the new folders from any other machine on the network but not from this one.
    When the copying fails Finder just hangs with
    Copying "" to "ShareName" rather than having the name of the file, I believe this may be where the error lies.
    I have also tried running the App Maintenance from Titanium Software, after running this i can copy files over the network fine, but after I have copied 10 or so files, the situation goes back to not copying files correctly. 
    Tags:

    I have tried several files and also I have copied the files on to a USB Hard Drive and then onto another machine, that machine was able to copy the files over the network.
    The Firewall is switched off on this Mac, I have tried various different options with the Firewall, Turning it off, ensuring the AFP connections are allowed.
    Also using the Maintenance app, that I mentioned clears the Caches, repairs permissions etc etc

  • I cannot printany web pages or emails over a wireless home network. My OS is windows 7 and am using an Epson printer. I know I have the home network set up correctly as i can print files over the network.

    I cannot print any email or web pages over a wireless home network. I know that I can print my files over this network, just not anything from the web or emails using Firefox. I am using Windows 7 and printing to an Epson.
    == This happened ==
    Every time Firefox opened
    == when I set up the wireless home network.

    The most likely reason for this is that the wrong printer is chosen in the File->Print window.
    In Firefox, go to File->Print and click the dropdown box with printer names. Ensure that the correct network printer is selected, then try printing again.

  • I need to copy files over the network PSSession . ( Firewall / DMZ / Etc. )

    Hello
    I need to copy files over the network PSSession . ( Firewall / DMZ / Etc. )
    I have a script where I copy from my local server ( server1) to the remote server ( server2 ), but I can´t not make script that will copy from the remote server to my local by my session. From server2 to server1
    Script is as below ...:-)
    HELP : ....
    winrm s winrm/config/client '@{TrustedHosts="SERVER2"}'
        $Source = "D:\test\ok.log"
        $Destination = "D:\test\ok.log"
        $session = New-PSSession -ComputerName SERVER2
    Set-StrictMode -Version Latest
    ## Get the source file, and then get its content
    $sourcePath = (Resolve-Path $source).Path
    $sourceBytes = [IO.File]::ReadAllBytes($sourcePath)
    $streamChunks = @()
    ## Now break it into chunks to stream
    Write-Progress -Activity "Sending $Source" -Status "Preparing file"
    $streamSize = 1MB
    for($position = 0; $position -lt $sourceBytes.Length;
        $position += $streamSize)
        $remaining = $sourceBytes.Length - $position
        $remaining = [Math]::Min($remaining, $streamSize)
        $nextChunk = New-Object byte[] $remaining
        [Array]::Copy($sourcebytes, $position, $nextChunk, 0, $remaining)
        $streamChunks += ,$nextChunk
    $remoteScript = {
        param($destination, $length)
        ## Convert the destination path to a full filesytem path (to support
        ## relative paths)
        $Destination = $executionContext.SessionState.`
            Path.GetUnresolvedProviderPathFromPSPath($Destination)
        ## Create a new array to hold the file content
        $destBytes = New-Object byte[] $length
        $position = 0
        ## Go through the input, and fill in the new array of file content
        foreach($chunk in $input)
            Write-Progress -Activity "Writing $Destination" `
                -Status "Sending file" `
                -PercentComplete ($position / $length * 100)
            [GC]::Collect()
            [Array]::Copy($chunk, 0, $destBytes, $position, $chunk.Length)
            $position += $chunk.Length
        ## Write the content to the new file
        [IO.File]::WriteAllBytes($destination, $destBytes)
        ## Show the result
        Get-Item $destination
        [GC]::Collect()
    ## Stream the chunks into the remote script
    $streamChunks | Invoke-Command -Session $session $remoteScript `
        -ArgumentList $destination,$sourceBytes.Length
        Remove-PSSession -Session $session

    But have will the script look,  if i need to copy from
    From server2 to server1.
    My script copy from server1 to server2 and working, but I need server2
    to server1.

  • How can I watch AVI files over a network?

    It was not without hesitation on my part that I started a new thread—I was convinced there was a large body of information available on this subject. That I was correct in this (for there seem a plethora of articles and links) was unfortunately no help to me.
    After suffering the humiliation of my PC-championing roommate show me how to connect to another computer so I could access some AVI files, I ran into the problem of not having my Quicktime player compatible with them. I attempted a number of downloads, including a DivX player, the VLC player, as well as adding XVIDD and on2vp3 components to my Quicktime library folder.
    Currently, none of these have worked. Anyone have a clue about what I need to do?

    Phillip, AVI Files are infact for Windows Video and for you to be able to acsess them and play them you will have to download a Windows Media Player and you will probably have to choose it when you want to view them. Quicktime is your default player on your Mac you will have to change that when you download the windows player, I would leave it as Quicktime and choose the windows when you want to view them.
    http://www.microsoft.com
    Here is where you can download there player.
    cheers Don

  • Very slow working with eps files over new network

    Please help!!!
    Our IT has recently upgraded us from a OSX server to a 2 Terabyte SNAP SERVER 520.
    I am using the only INTEL Mac in the department (we have another 10+ G5 PPCs running 10.4), and the only one using OSX 10.5. Since changing to the new server, I am also the only one with several file saving/opening issues.
    I believe this is a network issue.
    It is with mostly ADOBE products and we all know they will not support, working over the network. Due to the volume of files, I simply cannot drag files to my HD, and work locally. It is not practical. I also know that we have not had any issues in the past, and don't see why I can't get to the root of the problem.
    **The most obvious issue is Illustrator .eps files.**
    I can open and save .ai files in good time both locally, and over the network. There is no difference either way. HOWEVER, if it is an .eps file working over the network is not practical. I get the spinning wheel for about 2 minutes each time I open, save, or make a change. It is VERY slow. Working on eps files locally is fine (about the same speed as .ai files), but as soon as it hits the server, it is painfully slow to do anything.
    Additionally, when saving Photoshop, Illustrator, InDesign AND Quark 7 files (direct to the network), I am regularly getting "Could not save because write access was not granted", or "Could not save becasue unexpected end-of-file was encountered", or "Could not save because the file is already in use or as left open" type errors.
    I simply then click 'OK', and then hit save again, and it either gives me the same message, or it goes into 'save as' mode which lets me save the file (same name, and same location, but the original file has disappeared).
    I am connected to the server IP address through afp:// but have also tried cifs://. IT have removed all access to the server through smb://, so I cannot try this.
    ANY help is appreciated.

    With regard to the EPS issue, I think I may have found the source of the problem for SMB users: the Suitcase Fusion plug-in.
    Did you make any progress on these issues?

  • Bridge CS2 - files over a network

    I have been using Bridge CS2 for a while now. It is mainly used for the preview and management of RAW files. Until recently, the files have been located on the local drive (C:) and there has been no issue. However, I have recently, for security reasons, moved all of the files onto a Linux file server. Ever since then, it has been painfully slow using Bridge, infact it crashes infrequently.
    I know that the solution may seem obvious - the file transmission is being slowed by the network/server. However the network runs a gigabit LAN with a gigabit switch between the two machines. The physical location of the server is less than two meters from the workstation, and I can confirm that the LAN is infact running at 1000 (monitoring via task manager of file transfer in Explorer between two machines). Regardless, even at 100bit LAN, Bridge should still be running smoothly.
    I copy the RAW files (about 12meg each pic) onto the server, and then open Bridge and it takes about 10mins to load up about 100 files.
    I have tried clearing the cache, and running the cache on both the local and network machine, and all of the this suggested by Adobe http://kb.adobe.com/selfservice/viewContent.do?externalId=317912.
    As far as I can tell, Bridge is taking a long time to build the thumbnails. I have even tried turning off anti-virus and firewall, but there is no difference. Every other network activity takes little/no time and I need this to work smoothly. Surely I don't have to restrict to local files!
    Please help me! Do I need to change any settings? Is it normal for Bridge to take so long over a network?

    I realise that operating over a network is never faster than a local drive, however using a gigabit LAN and dedicated file server should be the closest thing to running a local drive, if not as fast as a USB2.0 drive (which runs at 480Mbps).
    I have however been able to solve the problem. I am not sure if this is an actual "fix" but I did a few things:
    1) I unmounted the network drive and remounted it using SUBST (ie "SUBST X: C:\directory\path")
    2) I cleared the cache for both Bridge and the Camera Raw ("C:\Documents and Settings\ [user] \Application Data\Adobe\Bridge" & "C:\Documents and Settings\ [user] \Application Data\Adobe\Camera Raw"); then
    3) I rebooted all machines (including the sever with "sudo shutdown -Fh now"); and finally
    4) After reopening Bridge the first time I closed it down again and cleared the cache again.
    Now it works perfectly - infact it is very close to the speed it was working with the local drive. The cache build very fast and there is no more hanging or crashes, and I am back to the old Bridge!!

Maybe you are looking for

  • How do I delete an Apple iD from my iPhone?

    i used to share an iTunes account with my Dad, until recently. I got my own Apple iD. Everything has been working relatively well except for one thing. When I try to update apps, it still asks me for my Dad's iTunes password, instead of mine. I alrea

  • Agent Determination - PR Item Release

    Hi All, I'm trying to set up standard workflow WS00000038 for purchase requisition release notifications.  I'm having a problem with determining the correct agents.  I receive the following error in the log when the workflow runs: Agent determination

  • SQL Developer 3.2 - Exporting data with TIMESTAMP datatype

    Hi, We have users that are attempting to export data with the Timestamp format to Excel (xls format) using SQL Developer 3.2.  When attempting to sort the Timestamp in either asc or desc order, Excel is having issues sorting correctly.  I suggested t

  • Publishing Reports Sets in ADI

    We have traditionally relied for ADI to help us distribute monthly financial reports, i.e. spreadsheets to the company intranet site. Unfortunately the process crashes at about 20% of Excel output, i.e. Excel cannot complete this task with available

  • Change deployment target

    Hi everybody, I had OBIEE 11.1.1.7 deployed on Weblogic 10.3.6. Later I added ODI 11.1.7 to the same domain. I created a new server (odi_server1) which host ODI related deployments (odi_agent and odi_console). Today I noticed odi_server1 also hosts a