I can't get to my files!
I use Windows XP Pro and I have encrypted some of my files with EFS for security. When I'm logged on to the machine where I made them with the same user account as when I encrypted them, I can read them without a problem. But if I try to access those files across the network, I can't. Do you always have to access EFS files locally, or is there some way that I can access them from another computer on the network?
One way
Yes you can access your EFS-encrypted files across the network, but there's a trick to it. EFS uses certificates to identify who is or isn't authorized to view the files, and if you're trying to do it from a different computer, your EFS certificate isn't installed on that computer and that's why you're being denied access. One way to get around this is to export your certificate and then import it to the new computer.
To export your certificate, go to the computer where it's stored. You need to create a Certificates MMC.
- Click Start | Run and type mmc.
- In the new blank console, click File and then Add/Remove Snap-in.
- In the dialog box, click the Add button and select Certificates.
- Click Close, then OK.
- In the new Certificates MMC, in the left pane, expand Personal and then Certificates.
- Click the certificate you want to export. It should have the same name as your user name
- Double click it and click the Details tab
- Scroll down to "Enhanced key usage," in the Field column, it will say "Encrypting File System" in the Value column.
- Now right click the certificate, select All Tasks and then select Export. This will start the Certificate Export Wizard, which walks you through the steps of exporting your certificate.
- Save the private key along with the certificate. You'll have to enter a password to protect it.
To import it, on the new computer
- Create a Certificates MMC, expand Personal
- Right click the Certificates folder.
- Click All Tasks and then Import. This starts the Certificate Import Wizard. You'll need to know the path where you saved the certificate and the password you used to save it. Import it to the personal certificate store.
Second way
A second way you can access EFS-encrypted files over the network is to use a roaming profile. When you do this, your certificate automatically goes with you to whatever computer you log onto.
