Hi All,

I have around six directories that I want to protect using EFS. There are a
number of sub directories and around 6500 files.

I want to be able to encrypt the whole lot but make it that a group of users
have both ntfs and EFS permissions to view all the files. The idea is that I
make it so that EFS wise they can all access the files and folders but only
if they have ntfs permissions.

By default if I encrypt the top level folders I dont get the option of
assigning each user, only the person who is doing the encyrpting(in my case
administrator)has automatic efs permissions.

Is there a way of automatically adding these users when encrypting all the
files in one go?

Thanks for any advice you can offer.

--
robg

robg wrote:

> Hi All,
>
> I have around six directories that I want to protect using EFS. There are a
> number of sub directories and around 6500 files.
>
> I want to be able to encrypt the whole lot but make it that a group of users
> have both ntfs and EFS permissions to view all the files. The idea is that I
> make it so that EFS wise they can all access the files and folders but only
> if they have ntfs permissions.
>
> By default if I encrypt the top level folders I dont get the option of
> assigning each user, only the person who is doing the encyrpting(in my case
> administrator)has automatic efs permissions.
>
> Is there a way of automatically adding these users when encrypting all the
> files in one go?
>
Hi,

No, there is no builtin support for this, unless you program your
own tool that calls the AddUsersToEncryptedFile API.

More in this tread:
http://groups.google.com/groups?thre...0a% 40phx.gbl



--
torgeir, Microsoft MVP Scripting, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scr...r/default.mspx

Thanks for the clarification Torgeir.

--
robg


"Torgeir Bakken (MVP)" wrote:

> robg wrote:
>
> > Hi All,
> >
> > I have around six directories that I want to protect using EFS. There are a
> > number of sub directories and around 6500 files.
> >
> > I want to be able to encrypt the whole lot but make it that a group of users
> > have both ntfs and EFS permissions to view all the files. The idea is that I
> > make it so that EFS wise they can all access the files and folders but only
> > if they have ntfs permissions.
> >
> > By default if I encrypt the top level folders I dont get the option of
> > assigning each user, only the person who is doing the encyrpting(in my case
> > administrator)has automatic efs permissions.
> >
> > Is there a way of automatically adding these users when encrypting all the
> > files in one go?
> >
> Hi,
>
> No, there is no builtin support for this, unless you program your
> own tool that calls the AddUsersToEncryptedFile API.
>
> More in this tread:
> http://groups.google.com/groups?thre...0a% 40phx.gbl
>
>
>
> --
> torgeir, Microsoft MVP Scripting, Porsgrunn Norway
> Administration scripting examples and an ONLINE version of
> the 1328 page Scripting Guide:
> http://www.microsoft.com/technet/scr...r/default.mspx
>