Secure file on PC and server
hello
i have windows 2008 r2 file server in main office. using dfs access files
i have a windows 2008 r2 file server in branch office , data replicated using dfs (data read/write mode)
user's laptops (windows 7) configured
- access files thru dfs closest site
- use offline files on these files
we need secure files if laptop and/or branch office server stolen.
data must not readable other people
it seems efs , dfs/dfsr not compatible.
how can ?
thanks
hi,
generally set ntfs permission allow domain users access shared folders. if computer stolen, without domain account, new user still not able access shared folder.
now problem offline files. default offline files stored in %systemroot%\csc. default there no permission on computer, computer supposed stolen, guy should admin permission. folder still accessable after taking ownership , manually set permission.
thus if offline files cannot disabled (as needed), can maintain security of sensitive files using encrypting file system (efs) encrypt offline files cache. mentioned in article:
http://technet.microsoft.com/en-us/library/bb457104.aspx
please noticed if decrypt file missing, users not able access these files after reinstall of system.
technet subscriber support in forum |if have feedback on our support, please contact tnmff@microsoft.com.
Windows Server > File Services and Storage
Comments
Post a Comment