User can not encrypt files on network shares. 1

[Bretto]

I have a user that can set encryption on files and folders on the local drives of his PC, but however when creating files and folders on network shares gets the following error:

"An error occurred applying attributes to the file:

Z:\New folder

Keyset does not exist"

Can anyone help?

I have absolutely no idea!

 

[prescot9]

Bretto,

It's none of my business, but I don't recommend that users do this!

To use encrytion locally, of course, you must be running NTFS. Is the target volume, (z:\new folder), on NTFS?

If you're using Win2k Server, remember that permissions from the parent folders will propagate to the "new folder" created, so....

...you might also select to remove the check mark for "Allow inheritable permissions from the parent folder to propaget to this object" on your new folder on the z drive, and ensure that you give the user who wishes to encrypt "Full Control" to the share.

Once propagateable permissions are halted, the effective permission is "No Access", until you assign SOMEBODY rights to the folder object.

Rich
prescot9@hotmail.com
Father, Geek, and MCP

 

[Bretto]

Rich, I tested this by creating a new share assighning the everybody group with full controll to both the share permissions and the NTFS permissions of the folder.

However I am still getting the same error message?

An error occurred applying attributes to the file:

Z:\New folder

Keyset does not exist.

Ignore, Ignore All, Retry, Cancel.

Can anyone help me understand why?

Thanks in advance,
Bretto.

 

[cowboy00242]

You can't encrypt a network share because you are using the incorrect machine certificate for encrypting.

The shared drive is actually resident on the server (or remote machine), so encyrption must occur using that remote machine certificate. When you attempt to encrypt the drive from your workstaion, you are attempting to encrypt using your own desktop machine cert. So your attempt (regardless of your permissions) will fail, because the certs do not match.