EFS certificate location on win2k8 r2 domain controller/file server

-

hi,

i have following

-win2k8 r2 standard domain controller/file server (no certification authority on server or anywhere else. have 1 server)

-win7pro x64 laptop in workgroup mode (not joined domain)

the laptop has local efs certificate encrypt files on laptop locally.

when access file server laptop (laptop1) , login file server, put in domain ad user account testuser1. when encrypt files, not use local efs certificate, seems testuser1 generates certificate ad via smb protocol , certificate gets stored in ad automatically. don't see testuser1 efs certificate installed in mmc -> certificates on laptop. don't have certificates testuser1 on laptop.

for testuser1 efs certificate, when use laptop1 access encrypted files on file server, testuser1 getting certificate in ad via smb protocol because don’t have efs certificates on laptop1 testuser1?

i did test on brand new laptop (laptop2) in workgroup mode (not joined ad domain), , when access file server using ad account testuser1, can access encrypted files encrypted testuser1. didn't have install efs certificate testuser1. long access file server using ad username files encrypted user, can access files no problem. testuser1 efs certificate getting stored in ad? can’t find it. laptop2 getting testuser1 efs certificate info via smb/cifs protocol on file sharing?

when use laptop1 or laptop2 access file server via ad user account ‘administrator’, cannot access encrypted files testuser1. seems testuser1 efs certificate stored in ad don’t have ‘certificate authority’ setup anywhere. see efs certificate testuser1 in ad?

thanks




to sum up.

i can use new laptop that's not part of domain (no efs certificates) , access file server using ad user account testuser1 , can access encrypted files encrypted user testuser1 only.

how possible? how getting efs certificate access encrypted files testuser1?






Windows Server  >  Security



Comments

Post a Comment

Popular posts from this blog

DCOM received error "2147746132" from...

-
hi everybody, i have dc (my windows essentials 2012 server) , windows 2012 server in network.  the windows server 2012 inside domain. on server, got "non stopping" error says in event logs : ===> dcom received error "2147746132" fromd computer xxxx(my dc computer) while server trying activation : {6df8cb71-153b-4c66-8fc4-e59301b8011b} it never stops, got 11000+ new events :s i found : http://support.microsoft.com/kb/971153/fr i'm not sure should ? does got idea ? matthieu. hi, please try solution mentioned in below link: http://www.eventid.net/display-eventid-10006-source-dcom-eventno-272-phase-1.htm regards, cicely Windows Server  >  Windows Server 2012 General ...
Read more

ADFS 3.0 Event ID 4625 | An Error occurred During Logon | Status: 0xC000035B

-
we're getting these random errors on our adfs security logs, how can track down generating them? an account failed log on. subject: security id: null sid account name: - account domain: - logon id: 0x0 logon type: 3 account logon failed: security id: null sid account name: account domain: failure information: failure reason: an error occured during logon. status: 0xc000035b sub status: 0x0 process information: caller process id: 0x0 caller process name: - network information: workstation name: - source network address: - source port: - detailed authentication information: logon process: kerberos authentication package: kerberos transited services: - package name (ntlm only): - key length: 0 event generated when logon request fails. generated on computer access attempted. subject fields indicate account on local system requested logon. commonly service such server service, or local process such ...
Read more

DFSR RPC replication errors 5014 1726 with large files over VPN

-
i have similar issue ryan in reply http://social.technet.microsoft.com/forums/en-gb/winserverfiles/thread/6d49fd71-2236-4fcb-9763-bf1c03459ee8 cited below. start additional thread here because other 1 related windows server 2003 (r2) , i'm (as ryan) on windows 2008 r2 x64. here first of post ryan: i've got same problem on 2008 r2 dfsr server.  the spoke server has 2x intel 1 gigb on-board nics in active/standby teamed configuration. the hub server (running on vmware using 10gbit vmnet3 nic driver) logs dfsr event 5014 every 2-15mins (usually around 5mins). the spoke server not log event. replication running slowly. initial sync/replication. had re-configure replication folder because of lost dfsr database on spoke server.  could teamed nic on spoke causing error on host? a note: last time did initial sync on folder processed @ 30k files , hour. time it's doing few hundred and hour. another note: hub server has several replication groups , conne...
Read more