Microsoft KB Archive/302093

= HOW TO: Prevent Files from Being Encrypted When Copied to a Server =

Article ID: 302093

Article Last Modified on 10/31/2006

-

APPLIES TO


 * Microsoft Windows 2000 Service Pack 1
 * Microsoft Windows 2000 Service Pack 2
 * Microsoft Windows 2000 Advanced Server
 * Microsoft Windows 2000 Advanced Server
 * Microsoft Windows 2000 Service Pack 1
 * Microsoft Windows 2000 Service Pack 2

-



This article was previously published under Q302093





IN THIS TASK
SUMMARY
 * Copy Encrypted Files to a Server

REFERENCES IMPORTANT: This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows Registry



SUMMARY
You may want to have files in an encrypted state by using the Windows 2000 Encrypting File System (EFS) feature, such as on a laptop computer, while still having the ability to copy these files in an unencrypted state to a central server to share with other users.

This article describes how to cause encrypted files that are copied to a particular Windows 2000-based computer to be stored on that computer in an unencrypted state.

back to the top

Copy Encrypted Files to a Server
WARNING: If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.

To prevent EFS files from being copied to a server in an encrypted format, follow these steps on the destination server:  Click Start, and then click Run. Type regedit, and then click OK. Locate and click the following key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem

 Delete the NtfsEncryptionService value from the FileSystem key. Restart the server.

This change has the following effects on the target server:
 * Files cannot be encrypted or decrypted with EFS on this server.
 * Client computers that copy EFS encrypted files to this server will cause the files to be stored in an unencrypted state on the server.

Note that under typical circumstances (when this registry change has not been made), you cannot copy EFS encrypted files to another Windows 2000-based computer that has not been trusted for delegation. You receive the error message &quot;Access is denied. The source file may be in use.&quot; This behavior is by design.

back to the top

<div class="references_section">