EFS

[Andre I]

I'm the administrator of a W2K-file server. I'm not domain admin. For a
specific group of users I have to implement EFS for their homedrives as well
as for a shared group drive. The files and folders already exist and are
accessed through mapped drives from the XP-workstations. Is it possible to
implement EFS and how do I do it? What has to be done on the server? How can
I implement it without annoying my users? I must be able to recover files if
any emergencies occur.
Is it possible to implement it on the fileserver alone or do I have to
involve the domain controller for the certificate part? Thanks for your
help.

 

[Drew Cooper [MSFT]]

A domain administrator would need to make the server "trusted for
delegation" in the AD.

Here's a doc for XP/2003:
http://www.microsoft.com/technet/prodtechnol/winxppro/deploy/cryptfs.mspx

Windows 2000 is largely the same, although it doesn't have the UI to add
users to files and can only do full delegation (not constrained delegation).