Microsoft KB Archive/301395

= HOW TO: Set Up EFS for Secure Access to Data on a File Server or an Intranet in Windows 2000 =

PSS ID Number: 301395

Article Last Modified on 11/19/2003

-

The information in this article applies to:


 * Microsoft Windows 2000 Server
 * Microsoft Windows 2000 Advanced Server
 * Microsoft Windows 2000 Professional

-



This article was previously published under Q301395





In This Task

 * SUMMARY
 * ** How to Use EFS to Encrypt or Decrypt a Folder or a File
 * *** How to Use Microsoft Windows Explorer to Encrypt a Folder or a File
 * How to Use Microsoft Windows Explorer to Decrypt a Folder or a File
 * REFERENCES



SUMMARY
This step-by-step article describes how to configure Encrypting File System (EFS) to provide core file encryption technology when you store files on an NTFS file system partition. You can use EFS to encrypt and decrypt files to keep your files safe from intruders who might gain unauthorized physical access to your sensitive, stored data (for example, if your laptop or external disk drive is stolen).

back to the top

How to Use EFS to Encrypt or Decrypt a Folder or a File
If you are using a remote server, you can encrypt files and folders on the server; however, your data is not protected if you access a file over the network. Windows 2000 provides network protocols such as Secure Sockets Layer/Private Communication Technology (SSL/PCT) to encrypt data access over the network.

back to the top

How to Use Microsoft Windows Explorer to Encrypt a Folder or a File

 * 1) Click Start, point to Programs, click Accessories, and then click Windows Explorer.
 * 2) Right-click the folder or the file that you want to encrypt, and then click Properties.
 * 3) Click the General tab, and then click Advanced.
 * 4) Click to select the Encrypt contents to secure data check box, and then click OK.
 * 5) Click OK.
 * 6) After you are prompted to choose either to encrypt the folder and all its contents or to encrypt only the folder itself, specify the folder and its contents, and then click OK.

NOTE: If the folder is empty, encrypt only the folder.
 * 1) Click OK.

back to the top

How to Use Microsoft Windows Explorer to Decrypt a Folder or a File

 * 1) Click Start, point to Programs, click Accessories, and then click Windows Explorer.
 * 2) Right-click the folder or the file that you want to decrypt, and then click Properties.
 * 3) Click the General tab, and then click Advanced.
 * 4) Click to clear the Encrypt contents to secure data check box, and then click OK.
 * 5) Click OK.
 * 6) After you are prompted to choose either to decrypt the folder and all its contents or to decrypt only the folder itself, specify the folder and its contents, and then click OK.

NOTE: The default setting decrypts the folder only.

back to the top

