You administer Windows 8.1 Pro computers in your company network.
A user named User1 encrypts a sensitive file named file.txt by using Encrypting File System (EFS).
A user named User2 must be able to read file.txt.
You need to configure unencrypted read access to file.txt for User2.
What should you do?
A. Configure Advanced Security Settings.
B. Share the folder that contains file.txt.
C. Configure Advanced Attributes.
D. Configure Effective Access.
Correct Answer: C
Explanation/Reference:
Explanation:
Further Information:
http://www.howtogeek.com/178912/how-to-encrypt-files-and-folders-in-windows-8.1-using-efs/ How to Encrypt Files and Folders in Windows 8.1 Pro Using EFS
If you are concerned about other users of your system having access to your files, there has been a simple way to encrypt files and folders in every version of Windows since XP called Encrypted File Service (EFS). We will show you how to apply EFS to your files and folders.
NOTE: Files and folders you encrypt using EFS can only be decrypted using the Windows login that encrypted the file. Other users on the system will be able to see the files but will not be able to open them, even if they are running as administrator. That means that you also need to be careful you do not forget your login, or you will be locked out of your own files.
http://technet.microsoft.com/en-us/library/bb457007.aspx
How to Share Files Using Encrypting File System
This article describes how to share files using EFS, and is intended to assist system architects and administrators in developing best practices for creating data recovery and data protection strategies using Windows XP.
..
In Windows XP, EFS supports file sharing between multiple users on a single file. This provides an opportunity for data recovery by adding additional users to an encrypted file. Although the use of additional users cannot be enforced through policy or other means, it is a useful and easy method for enabling recovery of encrypted files by multiple users without actually using groups, and without sharing private keys between users.
Once a file has been initially encrypted, file sharing is enabled through a new button in the user interface (UI). A file must be encrypted first and then saved before additional users may be added. After selecting the Advanced Properties of an encrypted file, a user may be added by selecting the Details button. Individual users may add other users (not groups) from the local machine or from the Active Directory, provided the user has a valid certificate for EFS.
..
To add users
1. Click the Add button as shown in Figure 2 below.
Figure 2. Adding users
A new dialog box will be presented showing the existing users and certificates that are cached in the "Other People" certificate store of the local machine. It will also allow new users to be added from the Active Directory by clicking the Find User button.
Note A user must have a valid EFS certificate in the Active Directory to be added.
2. Click the Find User button to find new users as shown in Figure 3 below.
Figure 3. Finding new users from Active Directory
The standard object picker dialog box will be displayed and a search will be conducted.
