To implement EFS, a Public Key Infrastructure must be in place and at least one administrator must have an EFS Data Recovery certificate so the file can be decrypted if anything happens to the original author. The author of the file must have an EFS certificate. The files and folders to be encrypted must be stored on the version of NTFS included with Windows 2000.
Once the PKI has been established, to implement EFS, you would open Windows Explorer and right-click a folder or a file. Select Properties. On the General tab, click Advanced. Then select the Encrypt Contents to Secure Data check-box. The contents of the file, or of all the files in the selected folder, are now encrypted until you clear the check-box.
For more information on this, be sure to check out Chapter 11, "Enhancing Security Using Public Keys."
Was this article helpful?