Donate Us : paypal.me/MicrosoftLab
Encrypting User Data with EFS in Windows Server 2016
1. Prepare
DC21 : Domain Controller, IP 10.0.0.21 | DC22 : Certificates Server, IP 10.0.0.22 | WIN1091, WIN1092 : Domain Member (IP 10.0.0.91, 10.0.0.92)
2. Step by step : Encrypting Data for HiepIT account with EFS
DC22 : Install "Active Directory Certificate Services"
Server Manager - Manage - Add Roles and Features - Next to Server Roles : Select "Active Directory Certificate Services" - Add Features
Next to Role Services : Select "Certification Authority" and "Certificate Enrollment Policy Web Service" - Add Features - Install
Notifications - Congifure Active Directory Certificate Services on the distination server - Role Service : Select "Certification Authority"
Setup Type : Enterprise CA - Next to CA Name : Common name for this CA : PNS-CA - Configure
DC21 : Delete certificate default
Server Manager - Tools - Group Policy Management - Default Domain Policy - Edit… - Computer Configuration - Policies - Windows Settings
Security Settings - Public key Policies - Encrypting File System - Delete : Administrator
Start - cmd - gpupdate /force
WIN1091 : logon using HiepIT account. Update policy, Request certificate and create a floder share. Start - cmd - gpupdate /force
Create and share a folder named DATA, create a file text named report.txt local drive C:
WIN1092 : Logon using VietIT account. Start - \\10.0.0.91\DATA - Double-click report.txt === OK
Start - mmc - File - Add/Remove Snap-in...- Certificates - Add - Right-click Personal - All Tasks - Request New Cerfiticate… - Select Basic EFS - Enroll
Right-click report.txt - Genernal tab - Advanced… - Check "Encrypt contents to secure data" - Choose " Encrypt the file and its parent folder (recommended)"- OK
WIN1092 : Logon using VietIT account.
Start - cmd - gpupdate /force
Start - \\10.0.0.91\DATA - Double-click report.txt === Access is denied
Logon using account HiepIT. Start - \\10.0.0.91\DATA - Double-click report.txt === OK
Watch video Encrypting User Data with EFS in Windows Server 2016 online without registration, duration hours minute second in high quality. This video was added by user microsoft lab 28 June 2017, don't forget to share it with your friends and acquaintances, it has been viewed on our site 10,188 once and liked it 25 people.