Considerations For Designing Server-side Storage For Eps

By Author: Shirley Green
Total Articles: 129
Comment this article

EFS encrypted files can be stored on file servers or on Windows XP Professional servers by using WebDAV. Consider the following when designing server side storage for EPS:
Consider file server preparation for EPS file storage.The file server must be configured for delegation. Doing this creates some element of risk. When a
server is configured for delegation, the user account can be used by the server to request a service ticket from the Kerberos Distribution Center (KDC). There is no restriction on what type of service ticket can be requested, received, or used.
Consider the need for EPS key storage on the file server.To store EPS files on the server, the server must be able to encrypt and decrypt the files. The user's EPS keys must be available on the server. If roaming profiles are used, this is not a problem because the user's profile can be downloaded to the file server. If roaming profiles are not used, the user must log on interactively to the server and either import a copy of his EPS keys or allow a new certificate to be created and stored on the file server.
...
... Consider the use of a local profile on the server.When a local profile is created and EPS keys are generated, they are not the same key as that used in the
local file system. This means that an EFS encrypted file from the file server cannot be decrypted using the user's local computer EFS keys.
Consider file transport between servers.When a file free Network+ study guides is used to store the EFS files, EFS files are not encrypted while they traverse the network. Instead,they are decrypted on the workstation, traverse the network in plain text, and are encrypted on the file server. To protect files in transport, consider the use of IPSec to encrypt the files.
Consider using WebDAV.WebDAV is implemented in Internet Information Services (IIS) and allows users to store files on the Web server. If an IIS server is configured to do so, users can store EFS encrypted files on the Web server by using WebDAV.Consider WebDAV communications.Unlike simple file storage,WebDAV does not require that the EFS encrypted file be decrypted before transport. EFS encrypted files can be transported across the network and remain encrypted.
Report of the Active Directory service installation and removal process.It includes the name of the source domain controller used for replication. This information is a useful record that shows when promotion or demotion occurred on a specific server.
Report of security settings used during promotion or demotion. Log of the events that occur when joining a computer to a domain. Log of events that occur each time file replication nans.
Log of errors that occur when the Net Logon service attempts to dynamically create a a+ certification.Log of events during the computer processing of Group Policy and user profiles.