Encrypting User Data with EFS in Windows Server 2016

Donate Us : paypal.me/MicrosoftLab

Encrypting User Data with EFS in Windows Server 2016

1. Prepare

- DC21 : Domain Controller, IP 10.0.0.21 | DC22 : Certificates Server, IP 10.0.0.22 | WIN1091, WIN1092 : Domain Member (IP 10.0.0.91, 10.0.0.92)

2. Step by step : Encrypting Data for HiepIT account with EFS

- DC22 : Install "Active Directory Certificate Services"

+ Server Manager - Manage - Add Roles and Features - Next to Server Roles : Select "Active Directory Certificate Services" - Add Features

- Next to Role Services : Select "Certification Authority" and "Certificate Enrollment Policy Web Service" - Add Features - Install

+ Notifications - Congifure Active Directory Certificate Services on the distination server - Role Service : Select "Certification Authority"

- Setup Type : Enterprise CA - Next to CA Name : Common name for this CA : PNS-CA - Configure

- DC21 : Delete certificate default

+ Server Manager - Tools - Group Policy Management - Default Domain Policy - Edit… - Computer Configuration - Policies - Windows Settings

- Security Settings - Public key Policies - Encrypting File System - Delete : Administrator

+ Start - cmd - gpupdate /force

- WIN1091 : logon using HiepIT account. Update policy, Request certificate and create a floder share. Start - cmd - gpupdate /force

+ Create and share a folder named DATA, create a file text named report.txt local drive C:

+ WIN1092 : Logon using VietIT account. Start - \\10.0.0.91\DATA - Double-click report.txt === OK

+ Start - mmc - File - Add/Remove Snap-in...- Certificates - Add - Right-click Personal - All Tasks - Request New Cerfiticate… - Select Basic EFS - Enroll

+ Right-click report.txt - Genernal tab - Advanced… - Check "Encrypt contents to secure data" - Choose " Encrypt the file and its parent folder (recommended)"- OK

- WIN1092 : Logon using VietIT account.

+ Start - cmd - gpupdate /force

+ Start - \\10.0.0.91\DATA - Double-click report.txt === Access is denied

+ Logon using account HiepIT. Start - \\10.0.0.91\DATA - Double-click report.txt === OK

Видео Encrypting User Data with EFS in Windows Server 2016 канала microsoft lab