Win98 clients and EFS on file server

  • Thread starter Thread starter Herb Martin
  • Start date Start date
H

Herb Martin

What happens when a Win98 users (domain account) authenticated
on the domain with an account have EFS certs in the user account
properties tries to access a "server stored EFS file" (on a member
server or DC)?

My thinking is it isn't able to access the file?

Is there any upgrade that makes this work? (AD Client Upgrade? etc)
 
I don't remember if you can use security certificates on Win98 :) But if you
do, I believe you would be able to access encrypted files on the server -
provided that server account is set to be trusted for delegation, you have
appropriate EFS certificate, and, of course, Win98 can support cryptographic
provider used in the certificate.

--
Dmitry Korolyov [[email protected]]
MVP: Windows Server - Active Directory


What happens when a Win98 users (domain account) authenticated
on the domain with an account have EFS certs in the user account
properties tries to access a "server stored EFS file" (on a member
server or DC)?

My thinking is it isn't able to access the file?

Is there any upgrade that makes this work? (AD Client Upgrade? etc)
 
I don't remember if you can use security certificates on Win98 :) But if you do, I believe you would be able to access encrypted files on the server - provided that server account is set to be trusted for delegation, you have appropriate EFS certificate, and, of course, Win98 can support cryptographic provider used in the certificate.


Thanks, I wonder if anyone knows for sure -- my first
few Google searches failed to return anything (and I
am a really good searcher.)

Thinking that you could put the certs on the USER ACCOUNT
then there are plausible mechanisms for it to work even without
Win98's knowing cooperation....

--
Herb Martin


--
Dmitry Korolyov [[email protected]]
MVP: Windows Server - Active Directory


What happens when a Win98 users (domain account) authenticated
on the domain with an account have EFS certs in the user account
properties tries to access a "server stored EFS file" (on a member
server or DC)?

My thinking is it isn't able to access the file?

Is there any upgrade that makes this work? (AD Client Upgrade? etc)
 
Back
Top