User file usage on network shares

I need to create a PowerShell script where I can show how much storage space users are using. This would be for users on multiple network shares, above a certain amount (5 GB for example) and then exported to a CSV. Is
it possible to show the first level of subfolders and their totals?
Our Helpdesk does not have the permissions to see the folders on the shares but I do (Domain Admin). I will run the script every so often and email the CSV to them so they can contact the users.
Thanks!
J

Hi,
Yes, that's possible. Here's some starting material for you:
http://blogs.technet.com/b/heyscriptingguy/archive/2012/05/25/getting-directory-sizes-in-powershell.aspx
http://blogs.technet.com/b/heyscriptingguy/archive/2013/08/03/weekend-scripter-use-powershell-to-get-folder-sizes.aspx
Let us know if you have any specific questions.
Don't retire TechNet! -
(Don't give up yet - 13,225+ strong and growing)

Similar Messages

Using robocopy to copy files from a network share over a WinRS command line session

Hello,
Preface: Using server 2008 enterprise.
I can't seem to get robocopy to function over WinRS and I'm not sure where the problem actually lies. Running robocopy locally on the computer does work fine, but as soon as I try to run it through a remote command prompt through the WinRS client or directly with the WinRS client I get an access denied message (error 5).
I've tried using runas while logged into the remote command prompt as well, thinking that it could have been some sort of permissions inheritence issue.
I've checked the permissions on the remote file share, I've even given 'Everyone', 'Anonymous Logon' and the computer's active directory account full control over the folder and the file I'm trying to copy, but still get the access denied error.
I've tried using /COPY:DT since I read that usually resolved error 5 issues.
None of these things have worked.
I'm kind of out of ideas, I've read some blogs of people who have written powershell scripts which use winrm/robocopy so I figure I'm missing something stupid. Or maybe I've stumbled upon a bug?
C:\>robocopy \\192.168.100.1\share c:\test example.exe
   ROBOCOPY     ::     Robust File Copy for Windows
Started : Mon Feb 09 17:35:32 2009
2009/02/09 17:35:32 ERROR 5 (0x00000005) Getting File System Type of Source \\192.168.100.1\share\
Access is denied.
   Source - \\192.168.100.1\share\
     Dest : c:\test\
    Files : example.exe
Options : /COPY:DAT /R:1000000 /W:30
2009/02/09 17:35:32 ERROR 5 (0x00000005) Accessing Source Directory \\192.168.100.1\share\
Access is denied.

Yep, I verified permissions on them all :(
To maybe complicate the issue, I looked at the environment variables for myself while logged in locally to the computer and through WinRS and they look to be the same.
EDIT: Out of pure frustration I wrote a quick console application which impersonates the currently logged in user and copies a file from the network share I'm trying to access to the local computer. The application properly impersonates the user - but does not copy the files while it's run through WinRM. When you run the application as a locally logged in user it works just fine.
WinRM must be behaving goofy :(
This is the output of the following application:
C:\Windows\System32>test.exe
Name: domain\loggedinuser
IsAuthenticated: True
User: {GUID}
AuthenticationType: Kerberos
Destination directory doesn't exist, creating new directory..
Undoing impersonation..
No exceptions, no nothing :(
Imports System.IO
Imports System.IO.File
Module Module1
   Dim impersonationContext As System.Security.Principal.WindowsImpersonationContext
   Dim currentWindowsIdentity As System.Security.Principal.WindowsIdentity
   Dim cpr As New copyProgress(AddressOf FileCopyProgress)
   Dim destinationDir As DirectoryInfo = New DirectoryInfo("c:\destination\")
   Private Delegate Function copyProgress(ByVal totalFileSize As Int64, ByVal totalBytesTransferred As Int64, ByVal streamSize As Int64, ByVal streamBytesTransferred As Int64, ByVal dwStreamNumber As Int32, ByVal dwCallbackReason As Int32, ByVal hSourceFile As Int32, ByVal hDestinationFile As Int32, ByVal lpData As Int32) As Int32
   Private Declare Auto Function CopyFile Lib "kernel32.dll" (ByVal lpExistingFileName As String, ByVal lpNewFileName As String, ByVal lpProgressRoutine As copyProgress, ByVal lpData As Int32, ByVal lpBool As Int32, ByVal dwCopyFlags As Int32) As Int32
   Private Function FileCopyProgress(ByVal totalFileSize As Int64, ByVal totalBytesTransferred As Int64, ByVal streamSize As Int64, ByVal streamBytesTransferred As Int64, ByVal dwStreamNumber As Int32, ByVal dwCallbackReason As Int32, ByVal hSourceFile As Int32, ByVal hDestinationFile As Int32, ByVal lpData As Int32) As Int32
   End Function
   Private Function FileCopyProgress2(ByVal totalFileSize As Int64, ByVal totalBytesTransferred As Int64, ByVal streamSize As Int64, ByVal streamBytesTransferred As Int64, ByVal dwStreamNumber As Int32, ByVal dwCallbackReason As Int32, ByVal hSourceFile As Int32, ByVal hDestinationFile As Int32, ByVal lpData As Int32) As Int32
   End Function
   Sub Main()
      Try
         currentWindowsIdentity = CType(System.Security.Principal.WindowsIdentity.GetCurrent, System.Security.Principal.WindowsIdentity)
         impersonationContext = currentWindowsIdentity.Impersonate()
         Console.WriteLine("Name: " & currentWindowsIdentity.Name)
         Console.WriteLine("IsAuthenticated: " & currentWindowsIdentity.IsAuthenticated)
         Console.WriteLine("User: " & currentWindowsIdentity.User.ToString)
         Console.WriteLine("AuthenticationType: " & currentWindowsIdentity.AuthenticationType)
         If Not destinationDir.Exists Then
            Console.WriteLine("Destination directory doesn't exist, creating new directory..")
            destinationDir.Create()
         End If
         CopyFile(Path.Combine("\\192.168.100.1\share\", "example.exe"), Path.Combine("c:\destination\", "example.exe"), cpr, 0, 0, 0)
      Catch ex As Exception
         Console.WriteLine(ex.ToString)
      Finally
         Console.WriteLine("Undoing impersonation..")
         impersonationContext.Undo()
      End Try
      Console.ReadKey()
   End Sub
End Module

Windows 7 - Files missing from network share after trying to burn and no data cached to be burned

I ran into an issue trying to burn some file from a network share using Windows 7 Home Professional. I was trying to burn some .jpg files from a mapped network share drive using explorer. Every time I would drag the files to be burned from
the share drive to the explorer screen to be burned, the files would disappear from the share. To make things worse the files would not show up in the screen to be burned. I was unable to locate any of the files on either of the systems when performing
a search after this took place. I verified that the steps that I was taking to burn the files were the same as outlined on the Microsoft site. No matter what I did to burn these files, they were deleted from the mapped network drive.
Below are the steps that I took that both resulted in the files being deleted as well as what I had to do to finally burn the disc.
Steps that resulted in files being deleted:
1. Insert blank CD into drive.
2. From prompt select burn using explorer (Mastered Format)
3. Enter title and select with CD/DVD, click Next.
4. Open a second explorer window, navigate to mapped network drive with files to be burned and snap next to explorer to be burned.
5. Drag and drop the files from the share drive to CD.
This where the train would fall off the tracks every time. I would receive a message that the file(s) no longer exist and if I wanted to continue. From here the files would be deleted from the share drive. The best part is that the files
would also NOT be locally stored to be burned.
Steps to burn share files WITHOUT delete:
Follow steps outlined above, but instead of just dragging and dropping the files as outlined in step 5 select the files from the network share location, right mouse select copy. Then right mouse select paste in the explorer window to be burned.
I have tested this many times and every time ended up with the same problem. At this point I am sure that there is a problem with the way that Windows 7 is performing the burn. The system that I was using to burn is Windows 7 Home Professional
with all the patches and updates loaded. The remote system is Windows XP Professional with all the patches and updates loaded.
Thanks in advance

Yes, the problem is still continuing. However, after looking into as much of it as I can, I can confirm something that r.p.b_ started stumbling on. The files are deleted IF AND ONLY IF a user is using the built-in Windows 7 disc burning utility AND is dragging
and dropping the files to the drive from a network share; this doesn't happen locally. If you watch what happens in the native folder, the files are literally scrubbed from the drive as they are processed and added to the image. However, if you Right Click
on the files and copy them, then Right Click->Paste onto the drive, they remain. (The keyboard shortcuts also worked.) Also, 3rd party disc burning utilities function they way the should. (In other words, they don't delete the files.)
My speculation is that there's a bug in the coding that sees the network share as a temporary buffer file while the image is being prepared. Then, as the files are processed in what ever way is needed, the "temporary buffer" is being deleted. The result:
lost files on a network share. But, this is just speculation.

Excel 2007 ribbon freezes when opening (double clicking) a file from a network share

So unlike other post I have found when double clicking an excel file from a network share the ribbon is frozen. If I start excel from the start menu then open the file through recent documents browse to the file from within excel the ribbon is active.
Also, the preview pane is not active so it is not that issue.

Hello- I am having the same issue with a client in my office. Minimizing then bringing it back up fixes the problem but it is still a hassle. Have you found out anything else? Thanks - Erik

Data Federator: Access Text file from secured Network Share or Sharepoint?

Hi,
I am using BusinessObjects Data Federator Designer XI 3.0 Service Pack 2 - 12.2.2.0 (Build 1002172322) and I'm new to DF.
I am trying to use the Text File Datasource type to connect to a file on a secured Network Share and from a Sharepoint 2010 document repository. Is this possible?
I am currently able to use the Text File datasource to read a file from a public network share (
share\public\folderpath\file) or on the local federator machine using the "Local File" connection but cannot put in a username/password for accessing a secure network share. Is there a built in DF username/password that should be granted access to the share?
Neiher the FTP File System or SMB Share seemed like it would work here either.
For the Sharepoint connection, I know that I can make a webservice on a list and connect DF to the webservice, but I want to just connect to the document repository. I was unable to get this to work even with Sharepoint repositories using WebDav since the Local File method did not accept the url string (http://mysite.<org>.com/personal/<user>/Shared Documents). Is there any way to do this without having to change the way the file is exposed on the Sharepoint side?
How is this normally handled? Put the files on a unsecured network share or on the DF server? Import the files into a DB and just use DB connections?
Finally, is there a way to import XLS/XLSX files in DF or only CSV files? I saw DI has an Excel Adaptor but didn't see anything for DF and when I tried it either could not retrieve the XML schema or reading the file's data failed.
Thanks alot for the help.
Kerby

Bump, any help here with Data Federator usage? Sharepoint, XLS files, or using secured network share?

Multiple Users Mounting the Same Network Share?

Hello, first time posting...
I'll cut right to my main question: Is it possible, on OS X v10.3.9, for multiple users to simultaneously connect to the same network share?
Here in my office, we have a single Mac that is used by multiple people throughout the day. It has two accounts on it, 'Communications' and 'Studio'. 'Communications' is an Admin account that is used by a co-worker who spends the most time on the Mac. He created the no-limitation 'Studio' account for the rest of us to use.
There is a certain Windows network share that we both frequently use. We've found that if one user connects to the share first, the other user will not have access to it; using 'Go -> Connect to Server' will result in the share being greyed out in the list, and the share will not show up in the Finder.
However, there is one way around it. If Studio connects to the share first and then Communications (the admin account) attempts to make a connection of it's own *through a shortcut on the dock*, then a 'clone' of the share will be created on Comm's desktop, with a "-1" after the name (though it might be some other number).
This may sound like I've answered my own question, but what I'm looking for is a way for the non-Admin account to access the share after the Admin account already has (so that we don't have to log-in and disconnect Communications everytime Studio needs to manage files on the share).
We have Thursby Software's DAVE installed on the Mac, but I'm not sure how it fits into all this.
Any thoughts, suggestions or advice?
Thanks.

Bizarre. It turned out I could merge them, but only in to the mapped drive - L: - and only by explicitly clicking on the drive icon - if I typed L:\series in to dialog box it converted it back to \\nas\share\series... Not helpful.

File loss moving files to a network share

While moving some files (silly me to use move vice copy and delete later) to a SMB network share about half way through the move OSX lost connection to the share. Error message popped up telling me it couldn't complete the move and the files yet to be moved were deleted! Fortunately they were just some podcasts but I certainly didn't expect that a move operation would delete unmoved files. Is this common behavior under the Mac OSX?
Lawrence

Satoru Murata wrote:
And moving a file from one directory to another on the same drive is "physically" possible?
Actually, yes. They are fundamentally different. The actual file itself does not change. There is one copy of the file. There is also (at least) one hard link to the file. The hard link is what you actually see in the file system as a "file". In a true move operation, you create two links to the file. There is then one physical file with two pointers to it. Then, after that 2nd link is successfully created, you "unlink" the first one. Correspondingly, to "delete" a file, you just "unlink" the one and only link to it. Time Machine, for example, make extensive use of links to create snapshots of your files. These links are only possible on a single file system.
Why shouldn't we expect the Finder to be able to do that properly?
We should. But this is not a bug that should really affect anyone. I'm quite sure that there are more people who, after hearing about this, have tried to use a move across volumes than have ever tried it before. Yes, it is a bug. Yes, you could lose data. But it is a minor operation that few people knew about until recently.
And there's no guarantee that when you hit the "Send" button in Mail your e-mail will reach its destination. Perhaps you should snail mail it. Strike that, the USPS is even less reliable. Go deliver the mail in person.
That is a poor analogy. You still have a copy of the sent mail in your system. A better analogy would be to click "send" and then immediately deleting your copy of the sent message. Surely, that would be foolish. And I prefer DHL. I have had much better luck with them.
No one friggin' needs to use a computer, but a lot of people WANT to. And I'm saying there are people, if you can get it in your stubborn little head, who WANT to use Move instead of Copy, go back to original file/directory, click icon, drag to trash, empty trash, and click OK in confirmation dialog (which, by the way, is a few more than "one additional key" that you allude to).
My goodness! No need to get so upset
You can move files to new volumes all you want to. It is always going to be a risky operation, riskier than copying and then deleting. When Apple releases a fix, the risk will decrease, but I would not advise using it, on any platform.
First of all, who the heck are you telling me I'm the minority so I should just bite the bullet? Since apparently you're such an aficionado of the Terminal, which only 5% of Mac users use on a daily basis, I guess you would be just fine and dandy if there was a glaring bug in Leopard that prevented you from using it "until the software update is available", huh?
I'm "random guy on the Internet". I thought you knew that. That is an interesting question. I have always liked UNIX and I'm particularly fond of the Mac giving me the best of both worlds. But, I have to admit, I was a very happy Mac user long before MacOS X, so I think I could survive.
And second of all, you obviously think I'm some Vista troll or something, but I certainly am not, and it's quite insulting. I'm usually the first one to come to Apple's defense when need be. And, as I mentioned in my first post, I agree that this "problem" is totally overblown on various sites. HOWEVER, you are just an idiot fanboy of the worst kind if you maintain that there's really nothing wrong with this bug and suggest that, and I quote:
Really, the only reason for even attempting this operation is so you can get on the Internet and post a message about how Apple's horrible bug has caused you to lose data.
No, I didn't think that much about you at all. I was just trying to explain the difference between moving vs. copying and how those operations changed when performing them across two different file systems. I admit I am a bit sensitive about the Mac. I try not to evangelize anymore. I do try to respond to FUD when I see it. There has been a lot of that recently with Leopard.
I never said this wasn't a bug and that it shouldn't be fixed. I said it was a bug in a non-default behavior that few people even knew about. I also said that even attempting a move across file systems (even without this bug) is not a wise idea. It has a fairly high risk factor, a fairly low convenience factor, and no savings of space or time. It is my opinion that the only reason people care about it is so they have something to bash Apple about. I wasn't including you, personally, in that category. I was just trying to explain my thinking.
I know I'm fighting a losing battle here. In the "marketplace of opinions" the matter is already decided. Leopard is just as buggy as Vista, if not more so. I've never used Vista, so I can't say for sure. I know the Leopard is perhaps the best, fastest, most bug-free system I have ever used in 25 years. But you wouldn't think that from reading the Internet commentary-du-jour.

Multiple users accessing document on network share

In our small office we have a couple of numbers douments that are regulary accessed and updated by 3 different people on three different machines, the numbers documents they access are stored on a network share on the Mac Server in the office.
The problem we have is that all three able to open a file at the same time, obviously this is causing all sorts of isues. People losing data they have put into the file and also causes issues with someone being unable to save the file while someone else has it open.
Surely there must be some sort of feature that when one person has the file open, its is locked for editing to everybody else that attempts to access it, I have searched around but cant seem to find anything to solve the problem. Anybody here have any suggestions?
Thanks
Craig

Once a document is all set up, and then you are just making relatively minor edits, then you might find it useful to "share" it on iCloud and have everyone access it and edit it via Numbers on icloud.com rather than Numbers on the Mac. That way you can all work on it at the same time without losing changes.
SG

Windows 7 SP1 client file lock on network share hosted ny WIndows 2012 Server

Hello
I have one strange problem after migration from Windows 2003 Server to Windows 2012 Server R2 Standard.
All migration tasks went well but two things do not work.
In Computer Management you have The Opened Files feature and if you open any file that is located on the network share hosted by Windows 2012 R2 form Windows 7 SP1 and then close it
it remains open in the Opened Files tab (even if you wait an hour). There is no problem with Windows XP SP3. The issue exist only with Windows 7.
The session view of sessions to the file server do not work. If I try to open it I get the message that the application is not responding.
Can someone help me with that ?
About the environment:
It is one server Domain migrated form 2003 to 2012R2.
The domain and forest level was raised to 2012 R2.
I have made clean install of Windows 2012 R2 and then migrated AD.
Best Regards
Sebastian Sala

Hi Sebastian,
>>There is no problem with Windows XP SP3. The issue exist only with Windows 7.
T>>he session view of sessions to the file server do not work. If I try to open it I get the message that the application is not responding.
Based on the description, please check event logs in Event Viewer to see if there were some related events logged. Besides, does this phenomenon happen all Windows 7 clients? We can try to restart the client to see if it helps.
Best regards,
Frank Shen
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Can't copy files to a network share but can copy folders...

I frequently use a network share at work. I can view files off of it fine. I can erase files off it. I can copy folders to it.
However, any time I copy any single file I get the following error.
"The operation can’t be completed because you don’t have permission to access some of the items."
This occurs for every file I've tried. From txt files to jpgs to docs. Everything gives that error and fails. I'm at a loss and it's totally killing my productivity.
It's a linux based share and all permissions on that box are correct. My account can easily copy files from other machines. Also, the fact that files and modifications work on this computer seems to prove that as well. I think it's pretty apparent that the cause of this error is on my laptops end.
I've verified my disk permissions. I have no clue what could be causing this.

Look at this thread for discussion of this issue.
http://discussions.apple.com/thread.jspa?threadID=2382501
Search is your friend.

Why can't a user see all files in a network share?

Windows Server 2008 R2 is sharing a folder. Advanced Sharing permissions give Everyone Full Control.
NTFS Permissions give the OU "Operations" read/modify permissions.
In the Operations OU, 1 user (let's call him John) cannot see all the files in this folder. For example, here is the real contents of the folder:
File1
File2
File3
File4
File5
Everyone in the Operations OU sees all the files, except John. When John opens the folder, he sees:
File2
File4
File5
Several files are simply missing from the list. I have no idea where to look for help on this one. The files are dynamically added to the folder each day, and each day are cleared out. So every day it is a new set of files being generated (they are coming
from a PDF printer). There is no pattern to which files John can see, and which he cannot. Does anyone have any ideas?
Jesse

I had the same problem, and it was related to permissions. My PCs are now running Windows 8.1 and folder properties are set to display file name extensions of all files. The 2 invisible files are File1 and File3 in your example. I have copied them to
both PCs. Computer A can see them on its own drive, and on computer B via UNC. Computer B can see them on its own drive, but not
on computer A via UNC. The cause: computer B didn't have permissions on these 2 files on computer A. I was starting the UNC directly from File Explorer, and, in my case, this uses HomeUsers for permissions (over my home network). So, on computer A, I gave
permissions on these 2 files to the user HomeUsers and that fixed the problem. I will also create a more general solution using inherited permissions.
Specifically, I selected the file and chose properties/security/advanced/add/select a principal, then typed HomeUsers "Check Names", OK, and selected the desired permissions. This fits your situation: the files are being created automatically and
don't have the correct permissions for the other PC to see them. Inherited permissions should fix it.
Tom

Problem opening a link from webpage to a access db file on a network share

Hi all,
We have a webpage where there are links to the different ressources on our network..
one of these links points to the i:\somefolder\someDB.accdp or whatever extionsen access databases have..
so the idea is that the user goes to the webpage click on the link and because the I: drive on the pc points in the right place it opens the file in access.
this works. IE download manager pops up and asks what to do, open - save - save as
the users says open and access opens the DB for the user.
The problem is that IE download manager says the file was not downloaded and the access database windows does not take focus.
now this may seem like a small thing but we do get allot of support from users saying its not working. The problem here being that users don't see the blinking access icon in the process bar and thinks that clicking the link didn't work.
I assume the reason access doesn't pop into focus after choosing to open it from IE link is because IE sees the file as not downloaded and than nothing happens.
I have no clue why this happens (IE says the file was not downloaded or why access doesn't take focus after choosing open)
I have been at it for days..
I have put the site in the trusted site option which did nothing to solve the issue.
Turned off mime sniffer and screenfilter or what ever the filter in IE is called and i still got the issue
this is IE 11
ANY!... and i mean A N Y ideas would be priciated!
Sincerly
Casper

Hi,
Is this problem just occures to part of users? Is these computer installed any security software? If that it is, try to disable them for test.
It would be better to disable the AV software, then restart the computer to test the problem again if it appears.
If no use, in my opinion, it would be better to use network Monitor to capture the web access trace when clicking the link.
This could help us have a deep insight about this problem.
If there is any difficult, please feel free let us know.
Roger Lu
TechNet Community Support

AD User with personal OSX Network share?

Our students authenticate to a campuswide AD server and use it for home directories. our OSX server is bound to the AD. can we set this up to where whenever a student logs in, they also mount a network drive (from our server) specific to their userid that only they see?

Maybe this helps:
http://discussions.apple.com/thread.jspa?messageID=5215121
http://macosx.com/forums/mac-os-x-server/301613-unable-log-into-your-account.htm l

Can not copy files to network share

Hi everyone.
We have a Windows Server 2003r2 64-bit. There are a few network share on this server and folders with user profiles (we use roaming profile in our infrastructure).
A few days ago some users lost possibility to copy files on any network share on this server. Windows says "Not enough space on the disk", but free space on server is about 12% (100gb). If copy files to other server, everything is OK.
Log on user to another PC didn't help.
If join user to group "Local admin" on server - files copying succesfully.
Creating new folder with FC permissions for this user didn't help.
FSRM role isn't installed, no quotas.
Anyone ancountered whith similar situation?

Hi,
It seems that you configure disk quota on users to limit the disk space usage.
Configuring Disk Quotas on NTFS Volumes
http://technet.microsoft.com/en-us/library/cc758877(v=ws.10).aspx
If you configure disk quota on users, users cannot save data on the disk when the users exceed their quota limit. By default, quota limits are not applied to the Administrators local group. Thus, the uses joined to the "Local admin" group don’t have
the issue.
Managing Disk Quotas
http://technet.microsoft.com/en-us/library/dd277427.aspx
Best Regards,
Mandy
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Access Denied when trying to open a file that is encrypted on network share with EFS

I just recently enabled EFS on the default domain policy and created a new network share, encrypted a file and added myself to that file and tried to open the file from my workstation. I then receive an error "Access denied", I also tried
to create a file and encrypt it on that same share and get an error "The requested operation cannot be completed. The computer must be trusted for delegation and the current user account must be configured to allow delegation."
My steps.
1. Enable group policy for EFS, removed the expired certificate that was already there and Created a new Data recovery agent.
2. Created a network share, created a test file, enabled encryption on the file
3. certmgr.msc, personal and requested a new certificate, Basic EFS
4. On the network share and properties of file, advanced, details and added the user
5. from the workstation tried to access the file, Access Denied. I can create any file I won't just can't add attributes to encrypt the file or open an encrypted file
Now if I go to the server where the CA is located which is also the AD server and create share and run the same process it works as expected. I'm guessing I have to export the cert from the CA server as a pfx and import that to both the server that
has the network share and the workstation but that still doesn't seem to work. Maybe I don't understand how EFS works and this is not possible? Any suggestions would be appreciated.

You are correct in not understanding how EFS works.
When you connect to an encrypted file via a network share, the encryption/decryption takes place *on* the server. To enable over the network access, the server's computer account must be trusted for delegation.
The server actually impersonates the user and creates a user profile on the server (containing the defined EFS certificate and private key). The important thing to remember is that the files is transmitted in clear text from the server to the client.
See http://blogs.technet.com/b/instan/archive/2010/08/11/remote-efs-decryption-and-trusted-for-delegation-requirements.aspx
Brian

User file usage on network shares

Similar Messages

Maybe you are looking for