Microsoft KB Archive/308991

From BetaArchive Wiki

Article ID: 308991

Article Last Modified on 10/26/2002



APPLIES TO

  • Microsoft Windows XP Professional Edition



This article was previously published under Q308991

SUMMARY

This article describes how to share access to a file that is stored by using Microsoft Windows XP Encrypting File System (EFS). Encryption is the process of converting data into a format that cannot be read by others. You can use the Windows XP EFS to automatically encrypt your data when it is stored on the hard disk.

back to the top

How to Share Access to Encrypted Files

NOTE: You must be a member of the administrators group or the user that encrypted the file in to add users to it. If you are not authorized to add users to an encrypted file, you receive the following error message:

EFSADU
Error in adding new user(s). Error code 5.

You can retain the security of file encryption while allowing specific users access to your encrypted files. To allow access to your encrypted files:

  1. Right-click the encrypted file, and then click Properties.
  2. Click the General tab (if it is not already selected), and then click Advanced.
  3. Click Details, and then click Add.
  4. Select the user you want to share access to the encrypted file with, and then click OK.
  5. When you are finished adding users, click OK three times.

back to the top

Troubleshooting

  • Encrypted files are not accessible from Macintosh clients.
  • You may be unable to open documents that other users store in your encrypted folder. When a user creates a document in an encrypted folder, only the user that created the document can open it unless they grant access to other users. Because of this, a folder that you encrypt may later contain files that you cannot open. If you require access to these files, ask the creators of these files to add your user account to the list of users with whom the encrypted files are shared.
  • The EFS documentation indicates that a user who is granted share access to an EFS encrypted file must also have NTFS Write permission for the file in order to edit it. However, if the file is a Microsoft Office document, the user must have Modify permission for the file in order to edit document. Modify permission includes Write permission.

back to the top


REFERENCES

For additional information about using file encryption in Windows XP, click the article numbers below to view the articles in the Microsoft Knowledge Base:

307877 How To: Encrypt a File


308989 How To: Encrypt a Folder


308993 How To: Remove File Encryption


223316 Best Practices for Encrypting File System


back to the top






Keywords: kbhowto kbhowtomaster KB308991