EFS in Teams on Network Shares

Hi,

today I have found a great article about productive usage of EFS in teams. I mean everyone who have ever tried to use EFS in a multi-user environment may have seen the same unbelievable shortcomings: SMB EFS works with server based profiles with a bunch of issues as a result of this concept. And even with WebDAV there is still a major issue: multi-user server shares with EFS will not work because you can't inherit the EFS "ACL" and a new file will only be decryptable by the file owner. No comment.

Well, here's the link:
http://geisbauer.blogspot.com/2008/06/sharepoint-dateien-verschlsseln-teil-1.html
http://geisbauer.blogspot.com/2008/06/sharepoint-dateien-verschlsseln-teil-2.html

But sorry... it's in German. Maybe some of you folks can read it?

Joelle

Great Microsoft EFS articles and tools

Microsoft EFS (Encrypted File System) can be used in combination with SMB and WebDAV. With SMB on network shares it makes not much sense (see my other notes) because of the strange implementation of using server side profiles and keys. But on local disks or with WebDAV on network filestores it's a great security enhancement out-of-the-box.

But there are a lot of issues and caveats you have to know when you want to deploy EFS in an enterprise infrastructure. Today I found the "ParanoidMike" blog which is a great resource for some of EFS related question:

EFS Certificate Updater
EFS and SYSKEY backgrounder
Why EFS makes no sense on servers

Source: ParanoidMike