IT Security Stack Exchange
IT Security Stack Exchange

Questions tagged [efs]

Encrypting File System (EFS) is a Windows feature providing filesystem-level encryption.

17 questions
7
votes
2 answers

Win10: Access other logged on users' memory

How easily can admin users access the data of other users' running processes on Windows 10? Especially webpages loaded by Chrome. Example Context Bob and Alice share a single Windows 10 installation. Each has their own password protected local user…
Hanswurst
  • 73
  • 3
4
votes
1 answer

Is EFS on Windows useless?

So, after reading through the dialog from one the EFS Windows--after encrypting certain files on my system--I ran into a possible complication. If I'm not mistaken, the encrypted file or folders are only inaccessible to other users. In this case, I…
ThatRandomGuy
  • 165
  • 1
  • 5
3
votes
3 answers

Does EFS protect against data theft by ransomware?

Recent ransomware events often include data theft in addition to just encrypting data. The Encrypting File System on Windows Pro/Enterprise editions encrypts individual files using a private key stored alongside certificates for that user account.…
HiddenTricks
  • 33
  • 3
3
votes
1 answer

How is encryption different for Windows yet they are identical?

I right clicked on C:\Users\USERNAME and did advanced -> enable encryption. On one laptop it turned green. The other it shows an icon on the files with a lock. What is the difference between these? Both are factory installs with Windows 10. They…
Jason Pass
  • 61
  • 4
3
votes
2 answers

How difficult is it to brute-force Windows EFS encryption?

With EFS I have C:\$USER\ encrypted so all files owned and used by said user are encrypted. If this laptop is stolen, am I correct that they could pull the microsoft user password hashes, crack them, then decrypt the files? Unless things have…
Jason
  • 3,086
  • 4
  • 20
  • 24
2
votes
0 answers

How secure is Windows EFS on Amazon?

We evaluate using Windows EFS on Amazon EBS. There is a report about Windows flaw that allows you to copy data from an encrypted volume as described in this article:…
isobretatel
  • 121
  • 2
2
votes
1 answer

Is encrypting the FireFox folder with EFS protecting saved passwords in case of someone accessing the hard drive?

What I want to do: Use the "save password" feature in FireFox (on Windows 10) without using FireFox's master password feature. What I'm afraid of: Someone stealing my laptop or getting access to my hard drive in a different way without getting…
Tim Pohlmann
  • 155
  • 6
2
votes
0 answers

Windows EFS Files Spontaneously Unavailable

We are trying to secure a folder with over 1 million very small text files using Windows EFS on Windows Server 2008 R2. We already have an infrastructure in place for backing up keys and data. We started the folder encryption overnight on Friday. …
Frank Riccobono
  • 131
  • 2
2
votes
1 answer

Is EFS FINRA and SEC Acceptable

I'm trying to search in their manual but there is nothing explicit being mentioned as to what type and how encryption should be done. Can I assume that if I use EFS on the entire USER directory that it will be perfectly acceptable in terms of…
Jason Pass
  • 61
  • 4
1
vote
1 answer

Read NTFS / EFS encrypted files on iOS with saved certificate

I have data saved on old NTFS-format hard disks which were encrypted on Windows machines, using EFS (the native file encryption system built into Windows). I encrypted selected files/folders, only, not the entire drive. Is there any possibility to…
Michael
  • 11
  • 1
1
vote
1 answer

Is it possible to separate DRA decryption abilities?

In the name of separation of duties, I was wondering if there is a simple (or even not-so-simple) way of dividing the ability to decrypt an EFS encrypted file such that it would require two DRAs to decrypt the file, while still enabling the owner of…
Y     e     z
  • 133
  • 6
1
vote
1 answer

Decrypting files that were encrypted with EFS?

I was wondering if there was a way to decrypt files that were decrypted with efs. I have an external drive with encrypted files that were taken from an old computer. I have the certificate and I believe the private key as well, I'm just not sure how…
Tucker
  • 11
  • 1
1
vote
2 answers

Will encrypted files on a volume still be encrypted when uploaded to a cloud service?

If I encrypt some files in a folder using EFS, and then I upload such files to a cloud service, will they be encrypted on the cloud? While the logical answer seems to be yes, I think in reality the answer must be no: because when I upload I am…
nico
  • 341
  • 1
  • 2
  • 9
1
vote
2 answers

EFS certificate expired and Root CA offline

If an EFS certificate is expiring and attempting to renew itself AND the issuing subordinate which issued that certificate is down, offline, or has it's subordinate certificate expired, will the EFS certificate renew from a different issuing…
Markie Mark
  • 11
  • 5
0
votes
0 answers

EFS-encrypted files not lost when domain admin resets password

There are many articles out there stating that a user's encrypted files are lost after an administrator resets the password of that user. I tried: Logged on as user (Domain User) with password 54321 created a file named test.txt on the…
TomS
  • 101
  • 1
1
2