EFS

[Guest Steve]

All,

 

I am attempting to get EFS file sharing working in a 2K3 AD Environment with

XP Machines. I have successfulyl installed a DRA and disabled self-signed

certificates with the Windows hotfix and Group Policy option as specified in

the Windows KB Article. However I still can't get EFS to work over the

network. In fact since installing the above, another user can't create a new

encrypted file wthin an encrypted folder. They get access denied.

 

Another user had told me that I should enable credential roaming or roaming

profiles. This was to solve multiple certificates from being issued in AD

(via Enterprise CA). Would this also prevent me from sharing encrypted files?

I am with an understanding that everytime a user logs on to a machine on teh

network a new certificate is generated by the CA (thus roaming is needed). If

this is hte case, which one do I want to use, credential roaming or roaming

profiles?

 

Thanks,

-- Steve