Questions tagged [encrypting-file-system]

Windows Encrypted File System

The Encrypting File System (EFS) on Microsoft Windows is a feature introduced in version 3.0 of NTFS that provides filesystem-level encryption. The technology enables files to be transparently encrypted to protect confidential data from attackers with physical access to the computer.

https://en.wikipedia.org/wiki/Encrypting_File_System

26 questions
1
vote
3 answers

Can my Windows Domain Administrator decrypt my DPAPI encrypted files?

I want to encrypt passwords using the DPAPI like this ProtectedData.Protect(plain, optionalEntropy, DataProtectionScope.CurrentUser); and wonder if the domain administrator could decrypt the generated blob, as Using Passwords Effectively …
Walter Peel
  • 293
  • 1
  • 4
  • 7
1
vote
0 answers

SQL Server 2012 Win32 Share Permissions with EFS and FileTable

I've got SQL Server 2012 working with my Visual Studio SQL Project, as discussed in more detail on my other SO post. FILESTREAMS are enabled, FileTables are created in their own FileGroup, and my SQL Project generates good indexable/searchable…
1
vote
2 answers

How can I prevent local admin users accessing database files encrypted with EFS?

Let's assume that I have a C# multi-user client-server application and SQL Server 2008 Express as the database. It's an application that is supposed to be installed on customer's PCs, where everyone who works for the company can have access, i.e.…
0
votes
1 answer

NTFS EFS : How to copy encryption certificates from one file onto (an)other file(s)?

I would like to copy all encryption certificates associated with one marker-file onto a set of other files. Sure, there's the QueryUsersOnEncryptedFile function that returns a PENCRYPTION_CERTIFICATE_HASH_LIST, and there's the…
0
votes
1 answer

Bizarre Return Code from SetUserFileEncryptionKey

I'd like to read an EFS certificate (say from a pfx file) and use it temporarily to read/write some files. (I'd like it to not persist in any store once the program exits.) It looks like SetUserFileEncryptionKey might provide this functionality, but…
Benjamin
  • 123
  • 1
  • 1
  • 7
0
votes
0 answers

Is there a way to keep Windows EFS encryption metadata in place when uploading a file to Linux?

I am trying to copy an EFS Encrypted zip file from Windows to a Linux server (through OpenSSH scp). It was encrypted using the PowerShell .Encrypt() method. Unfortunately, for whatever reason, when I download the file from the Linux server to a…
0
votes
3 answers

Prevent Save As Functionality

I need to prevent a document from being saved / saved as (say from ms word). I've looked around and I havn't quite found a satifying answer. I've considered EFS... but I don't think it prevents the user from saving the document as... (though it…
user38734
  • 342
  • 6
  • 16
0
votes
1 answer

File.Encrypt() causes IOException The parameter is incorrect

I have a web application that when prompted will check if there is a file with some encryption keys in a particular location. If the file is not present, the keys will be auto-generated and stored within the file. Afterwards, the file is supposed…
Odd32
  • 1
0
votes
1 answer

EFS certificate is ignored

My windows profile has a valid EFS certificate (with appropriate EFS flags) and when I try to encrypt a file with Windows Encrypt() method a new certificate is generated instead of using the one I imported. When I test it with dev certificate (the…
andrew.fox
  • 7,435
  • 5
  • 52
  • 75
0
votes
1 answer

Adding EFS Data Recovery Agent (DRA) certificate programmatically by API

I'm looking for a way to programmatically (any language) add a Data Recovery Agent (DRA) certificate for Encrypting File System (EFS) in Windows OS. Manually it's easy to perform by: gpedit.msc - Security Settings -> Public Key Policies ->…
andrew.fox
  • 7,435
  • 5
  • 52
  • 75
-2
votes
1 answer

How to restore the deleted EFS certificate

I accidently deleted EFS (Encrypting File System) certificate by using the properties form in the Internet Explorer and now I don't have access to my encrypted files. Is there any option to restore the certificate? I can see this certificate in the…
Vadim
  • 349
  • 2
  • 7
1
2