"greyman" wrote
> hello,
>
> i had this question in my mind for quite some time...
>
> If efs is built to deny access of an encrypted file to a 2nd
> person,then why
> should he be given access to delete the same file??
>
> I have tried this scenario where 2nd person was able to delete the file
> encrypted by the 1st person...
>
> efs is about securing ur info from others...whats its use if one can
> just
> delete ur confidential info??
Because EFS does not do that. It just encrypts so it can't be read. Set
permissions on the file or folder if you want to control who can delete it.
How to set, view, change, or remove file and folder permissions in Windows
XP
http://support.microsoft.com/kb/308418/en-us
How to set, view, change, or remove special permissions for files and
folders in Windows XP
http://support.microsoft.com/kb/308419/en-us
Encrypting File System in Windows XP and Windows Server 2003
http://www.microsoft.com/technet/prodtechnol/winxppro/deploy/cryptfs.mspx
How To Encrypt a Folder in Windows XP
http://support.microsoft.com/?id=308989
How To Remove File Encryption in Windows XP
http://support.microsoft.com/?id=308993
How To Encrypt a File in Windows XP
http://support.microsoft.com/?id=307877
HOW TO: Share Access to an Encrypted File in Windows XP
http://support.microsoft.com/?id=308991
Best practices for the Encrypting File System
http://support.microsoft.com/?id=223316
How to back up the recovery agent Encrypting File System (EFS) private key
in Windows Server 2003, in Windows 2000, and in Windows XP
http://support.microsoft.com/?id=241201
How to add an EFS recovery agent in Windows XP Professional
http://support.microsoft.com/?id=887414